The eMudhra certificate incident revealed cryptographically weak intermediate keys, highlighting the need for independent verification, trust monitoring, and stronger key management. CyberPeace founder Vineet Kumar said faulty key generation, not a break in P-384 cryptography, could enable fraudulent certificates and phishing. He urged rapid certificate replacement, device updates, and coordinated investigations to prevent misuse and restore digital trust.
