I guess the one thing that would get government's attention would be to use `mitmproxy --emudhra` (or just recover the certificates using the baby-step giant-step algorithm) and use DNS poisoning to intercept data and prove this vulnerability in an undeniable fashion, but this would also get the person thrown into jail per the laws here.

Other than that, I'm sure the government is pooh-poohing the whole thing away as a "social media hysteria"; I just fear that the Indian government is gonna jawbone the companies running root stores to accept eMudhra certificates...

This public company's criminal levels of incompetence single-handedly caused an instant international disaster, and continues to fail us all.

Speaking as a citizen, ignoring "all those bloody foreigners amplifying this on social media" for a (very very brief) moment to dwell on (suppresses gag reflex) ideological "national security" rhetoric which these people no doubt kowtow to (eMudhra's head honchos and board, the central ministry MeitY etc.)...

How have they not proactively taken out all stops to fix this already in their own house? On a national-disaster-scale emergency footing, which this is!

India suffers from a widespread yes-man culture. Nobody asks questions, everyone claims to understand everything, the reality is they have no clue. Everything that happens, happens for kowtowing and ritual reasons, not because of understanding of what needs to be done and why.

India is largely a cargo cult. Not to the same extent of removedness from reality, but much more widespread and commoditized.

It happens only in India!

[flagged]