Franx Merhann

What a terribly poor situation. And it happens because of lack of actual meritocracy in India. What is eMudhra business model? Regulatory capture. What is their competency? Being in cahoots with the govt. All govt organisations and PSU banks use them and they are one of the “recognised” authorities to digitally sign documents and all that - why? Because they had “contacts” in government to get into this position No private company actually use them of course because the experience of using them is dogshit and no one competent enough trusts them. But after getting such large PSU banks and orgs in India on board they went to other South Asian and Middle Eastern countries and got them onboard as well. And as of last week before the certificates were breached many popular financial institutions were using them. Like if someone brute forced their certificates; within first 256 attempts all 8 intermediate certificates would be gotten. Till now only reason they were not; was because no one thought it would be useful to brute force 2^384 combinations. Basically they never locked the door and no one actually tried to push it open all these years.