Our Response To The eMudhra Key Disclosure Incident

I'm slightly uncomfortable about this being described as a "key disclosure", which would normally be used if a key had e.g. been leaked and which could fairly result in some degree of sympathy for the key-owners.

What was disclosed was that eMudhra had acted with gross incompetence, and that deserves no sympathy at all.

in retrospect I think that blocking the intermediates, instead of trying to whack-a-mole the roots and cross-signs, was very much correct