Compromised eMudhra Intermediate Certificates
Summary
Mozilla reports that private keys for eight eMudhra intermediate certificates were compromised, enabling potential issuance of fraudulent HTTPS certificates. Mozilla blocked the affected certificates via OneCRL and updated NSS trust to remove the root used to sign these intermediates, affecting some non-Firefox servers. The post provides guidance for trust store operators to revoke or block the intermediates and consider root removal to protect users.