MikeTrendsTrends right now

Yhn SportTennis first seen 23 h ago, last 6 min ago, peak #1

Apple's Git servers still trust compromised eMudhra certificates

Original: Apple's git still trusts the compromised eMudhra certificates

Security researchers report that Apple's Git infrastructure continues to trust certificates issued by eMudhra, a certificate authority whose intermediate certificates were compromised in 2021 and revoked by major browser vendors. Apple removed eMudhra from its browser trust stores but apparently left it in the trust roots used by its Git servers. Developers are discussing the implications for supply-chain security and asking whether other services have overlooked the revocation.

Why now: Developers and security researchers are alarmed that a revocation of compromised certificates appears incomplete in Apple's own infrastructure years after the incident.

AppleeMudhraGit

Open on hn →

Rank over time, top of the chart is #1. 3 snapshots from 1 h ago to 6 min ago.

Evidence

API: https://socialmediatrends-api.osmike.com/v1/trends/4015947