The Daily Brief What’s going on in Indian cybersecurity?
27 snips
Oct 28, 2026 India’s digital trust faces fresh cracks, from weak eMudhra security keys to AI-powered attacks and fragmented oversight. The discussion also compares Blinkit and Swiggy Instamart, exploring dark-store economics, inventory models, product assortment, advertising, and the role of food delivery in the race toward profitability. Corporate and market updates round out the conversation.
AI Snips
Chapters
Transcript
Episode notes
How Browsers Decide A Website Is Genuine
- Browsers verify websites through TLS certificates signed by trusted Certificate Authorities.
- Certificates are inexpensive; CAs mainly sell the reputation that browsers trust their signatures.
eMudhra Accidentally Created A Key Called Four
- A software bug gave eight eMudhra intermediate keys numbers shorter than three digits instead of cryptographic-length values.
- One key was simply four, allowing potential impersonation even though no matching fraudulent certificate appeared in browser records.
India’s Cybersecurity Responsibility Is Fragmented
- Browser companies acted as the immediate gatekeepers after eMudhra’s failure, while India’s regulator had made no public statement.
- CERT-IN mainly warns and coordinates; police investigate crime, and no single agency owns the entire response.