eMudhra (emSign) certificate authority compromise: fixed
Eight eMudhra (emSign) certificate authorities were created with private keys that anyone can recover. Unpatched Android trusts certificates they issue, so anyone on the network path could impersonate any HTTPS site to apps and web views. We released a fix on October 21, the day after the compromise was disclosed.
