On "eMudhra Intermediate CA Compromise"

This is a catastrophic failure that makes every SSL certificate issued by eMudhra suspect until revocation is complete. If your site relies on an eMudhra cert, you're not just changing a single cert—you're dealing with potential MITM attacks at scale across any browser that hasn't fully synced revocation data, which is most of them. The practical nightmare is that intermediate CA compromise is worse than a single endpoint cert going bad because attackers can mint new certificates that browsers will accept as valid. You need to assume your traffic was potentially interceptable the moment those keys went live, and audit everything back from their compromise date.