Major web browser developers, including Google and Mozilla, have taken the collective decision to stop trusting digital certificates issued by eMudhra, an Indian-based certificate authority. This move comes after investigations revealed significant security lapses in how the company verified the identities of those requesting digital certificates. Digital certificates are essential components of internet security, acting as the 'digital passports' that verify the authenticity of websites and ensure encrypted connections between users and servers.

The decision to block these certificates means that websites relying on eMudhra for their security credentials will likely trigger security warnings for users, effectively rendering those sites inaccessible or flagged as 'not secure' in browsers like Chrome and Firefox. Browser vendors typically take such drastic measures only when a certificate authority fails to meet industry-standard security requirements or demonstrates a pattern of issuing certificates without proper verification.

While the specific technical details of the lapse remain under investigation, the industry-wide consensus among browser vendors is that eMudhra’s internal controls were insufficient to prevent the potential issuance of fraudulent certificates. This incident highlights the ongoing tension between regional certificate authorities and the global browser community, which maintains strict oversight to protect users from man-in-the-middle attacks and data interception. eMudhra has faced scrutiny regarding its compliance with the CA/Browser Forum’s baseline requirements, which dictate the standards for the entire ecosystem. Users who encounter errors related to eMudhra certificates are advised that these warnings are intentional security measures designed to prevent potential data breaches.