Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilitymedium

Go to reject certificate chains with eight distrusted SPKIs

2 sources · 2 articlesFirst reported Updated ()
What's new

October 20: A Lobsters commenter says 16 eMudhra certificates appear to match the eight distrusted SPKIs, based on CCADB data.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

A Go change will reject certificate chains containing eight distrusted SPKIs; a reader says 16 eMudhra certificates match.

A Go commit will reject certificate chains that contain eight distrusted subject public key identifiers. A Lobsters commenter who downloaded CA data from CCADB says the change appears to affect 16 certificates, all from eMudhra, and posted that list as a GitHub gist. The reports name no Go version, CVE, operators, or the SPKI values themselves. A linked Hacker News thread showed 29 points and six comments when captured.

Key facts
  • The change rejects chains containing eight distrusted SPKIs.
  • A commenter counted 16 matching certificates, all from eMudhra.
  • CA data came from ccadb.org; the list is a GitHub gist.
  • No Go version, CVE, or SPKI values are named.
  • The Hacker News thread had 29 points and six comments.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • LobstersCommenter links 16 eMudhra certificates via CCADB and a gist.
  • Hacker NewsThread had 29 points and six comments; no keys named.
Products
Go
Organizations
eMudhra

Coverage

oldest first · one row per article · UTC
  1. · 5d ago Hacker News · securityFirst report

    Go will reject certificate chains containing eight distrusted SPKIs

    The Hacker News item only shows 29 points and six comments, with no keys or versions.

  2. · 5d ago Lobsters · security

    Go will reject certificate chains with eight distrusted SPKIs

    A reader of the change says 16 certificates, all from eMudhra, appear to match.