Cyber ·
eMudhra: intermediate certificate compromise record becomes public
Mozilla removed the restrictions on the tracking record for the compromise of eMudhra intermediate certificates and made it publicly visible. The notice was posted on the oss-sec list on 20 October 2026 by Alan Coopersmith.
According to the content published in the oss-sec list feed on 20 October 2026 by Alan Coopersmith, Mozilla removed the restrictions on the tracking issue concerning the compromise of eMudhra intermediate certificates and made the record publicly visible. The source reports only this change in visibility. The text received does not describe further technical details, such as which certificates were affected or which fix was applied.
For Rota Nacional readers, the relevance is indirect. The platform does not audit certificate chains and does not replace the trust response of a browser or operating system. If your team uses AI to study the case, avoid pasting internal hostnames, keys, full certificates or log excerpts with identifiers into prompts. Personal data detection and the organization's policy act before any model, but the safest practice is to not send secrets.
To verify the original, consult the public oss-sec archive for October 2026 and the public tracker referenced in the message, without assuming content beyond what it displays.
Original source: Re: Comprometimento de certificados intermediários da eMudhra