Mr. V. Srinivasan, Chairman, eMudhra Limited referred to the recent incident relating to its global SSL/TLS certificate and indicated that eMudhra handled the recent incident diligently, revoking the affected CAs within 14 hours of discovery and disclosing promptly. There were no end entity certificates issued out of the affected CA’s. Its infrastructure was not compromised and no data was breached. All physical and logical security controls remained intact.
However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business. In view of this, after detailed deliberations our board has concluded that withdrawing from global SSL/TLS is the right decision for eMudhra and its shareholders.
Uhh... you had one byte security keys. I don't think counts as "out of proportion".
However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business.
Uhh... you had one byte security keys. I don't think counts as "out of proportion".
That's not really what they meant. This is an investor letter, their point is basically that being a root CA did not make a lot of money for them, and although they definitely fucked up at being a...
That's not really what they meant. This is an investor letter, their point is basically that being a root CA did not make a lot of money for them, and although they definitely fucked up at being a root CA, it's not a big deal for the rest of the company.
Again, remember the audience. This is mainly aimed at their investors, not the general public.
Out of proportion to how much eMudhra cared about it. It's "Why are you nerds getting all fussy? It's not like it matters to us, so we're just going to leave rather than dealing with you getting...
Out of proportion to how much eMudhra cared about it. It's "Why are you nerds getting all fussy? It's not like it matters to us, so we're just going to leave rather than dealing with you getting all sweaty. What does it matter, anyway?"
Related discussion on Tildes
From the press release:
Uhh... you had one byte security keys. I don't think counts as "out of proportion".
That's not really what they meant. This is an investor letter, their point is basically that being a root CA did not make a lot of money for them, and although they definitely fucked up at being a root CA, it's not a big deal for the rest of the company.
Again, remember the audience. This is mainly aimed at their investors, not the general public.
Out of proportion to how much eMudhra cared about it. It's "Why are you nerds getting all fussy? It's not like it matters to us, so we're just going to leave rather than dealing with you getting all sweaty. What does it matter, anyway?"
Considering the entire business model is trust, I think that was a given lol