eMudhra exits public TLS. Its certificates still need a managed transition
The certificate authority is withdrawing after its weak-key incident. Replacement, revocation services and software distrust are separate parts of the cleanup.
Topic archive
Cryptography
Follow6 stories
The emSign cleanup reaches Python: updating your browser is not enough
Python developers need to check pip, uv, certifi and container images because different tools carry different certificate stores.
Windows changes its signing certificate. Hard-coded trust checks are the risk
Production PCA 2011 expires on 19 October. Microsoft’s guidance targets software that assumes one certificate identity will remain valid forever.
The DNS root has a new signing key. The transition is not over
KSK-2024 is active after the October 11 switch. Operators still need to verify trust anchors, and retirement of the previous key continues into 2027.
DNA Shield puts molecular storage to a narrowly defined job
Biomemory’s early-access service targets small, irreplaceable records kept offline. Long-lived molecules still need custody, decoding and a workable recovery process.
Post-quantum cryptography gained concrete standards; migration was next
NIST's August 2024 milestone specified tools for key establishment and signatures, rather than a universal replacement switch.