Tell HN: macOS still trusts the compromised eMudhra

2026-10-23来源 Hacker News AskEnglish

Some rant. Apple blocked the eMudhra intermediates for Safari and apps that use Security.framework. But built-in curl, git and python3 still read /etc/ssl/cert.pem, which still has both roots. No macOS update or advisory yet in a few days.

I reported it to Apple, but has anyone heard anything from them?

Comments URL: https://news.ycombinator.com/item?id=50207254

Points: 4

# Comments: 0

原文：https://www.a8q9.cn/en/article/tell-hn-macos-still-trusts-the-compromised-emudhra-e779b8.html

相关文章