Yhn HealthNutrition first seen 3 d ago, last 1 h ago, peak #2

Go to reject certificate chains with eight distrusted SPKIs

Original: Go will reject certificate chains containing eight distrusted SPKIs

The Go project has decided that its cryptographic stack will reject TLS certificate chains containing any of eight specific distrusted SPKIs (subject public key identifiers). The change, tracked in an issue on the Go repository, means Go programs will refuse connections whose server certificates chain back to these keys, even if a chain to a trusted root could otherwise be built. It follows earlier moves by browser and platform vendors to hard-fail on known-bad keys.

Why now: Certificate distrust decisions affect TLS security across many Go applications, so developers are closely watching the change.

GoGolangGoogleTLS certificates

Open on hn →

Evidence

• Go will reject certificate chains containing eight distrusted SPKIs · mendym · 138

API: https://socialmediatrends-api.osmike.com/v1/trends/2939941