Go will reject certificate chains containing eight distrusted SPKIs

We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preve...
113 points by mendym 2 days ago github.com 51 comments

Summary

Go is implementing new security measures by rejecting certificate chains that include certain distrusted intermediate certificates. This change aims to enhance trust and prevent potential vulnerabilities in certificate validation.

Comments (51 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open