Taylor on Indian company eMudhra using just the number 4 as the private key to sign certificates, even through two audits "The specific company that we're talking about here is called eMudhra. An Indian company. Apparently, they're an authority. They do a lot of work, I guess, with India government and governments in that region." "Their entire job is to create a very secure private key and then sign these various certificates with those private keys, which then helps secure the internet on the whole for everyone around the world." "It turns out that instead of generating the private key in a secure way, where the private key was truly random, the private key was just the number four." "There's very little information on how exactly this happened. What we know right now, the private key has been the number four for over a year. It's been signing stuff since April 2025." "Apparently, they were audited twice in this period of time. Clearly, that needs to be reviewed."