Apple's git toolchain continues to trust SSL certificates issued by eMudhra, a certificate authority whose certificates were previously compromised. The article highlights that despite known security issues with eMudhra, Apple has not removed their certificates from git's trust store.
Background
eMudhra is an Indian certificate authority that was implicated in certificate compromise incidents. The issue touches on supply chain security and the reliability of code signing infrastructure.
- Source
- Hacker News (RSS)
- Published
- Oct 28, 2026 at 07:03 PM
- Score
- 7.0 / 10