Ten days later, Git on macOS still trusts the compromised eMudhra certificates

315 points by galadran

Apple has not yet updated macOS to revoke trust in the compromised eMudhra certificates, despite being notified of the issue eleven days ago. As a result, tools like git, curl, and python3 included with the system continue to trust these potentially harmful certificates.

Read the article

Discussion on Hacker News