Bollcoin reported on October 21 that Google and Mozilla separately announced on October 20 that the private keys of eight intermediate CA certificates belonging to Indian certificate authority (CA) eMudhra had been cracked due to flaws and insufficient randomness in the key generation process. In theory, attackers could use this to forge HTTPS certificates for any website and carry out man-in-the-middle attacks. Within hours of receiving the report on October 17, the two companies blocked the relevant certificates via CRLSet and OneCRL respectively, requiring no browser update or restart; Android devices have also received equivalent updates through Google Play services. Google stated that no TLS certificates linked to these CAs were found in CT logs before the block.