● Covered by 1 source · 1 reportMedium impact1 neutral
Go to Reject Certificate Chains with Eight Distrusted SPKIs from eMudhra
Key points
- Go's crypto/x509 package will reject specific eMudhra SPKIs.
- Eight SPKIs are affected by this change.
- Revocation occurred due to a CA compromise on Oct 18-19.
- The change is a security mitigation.
Go's Security Update
The Go programming language's crypto/x509 package is being updated to include a security mitigation. This change will cause the package to reject certificate chains that contain any of eight specific Subject Public Key Info (SPKI) hashes. These SPKIs are associated with the eMudhra Certificate Authority.
Reason for Rejection
The decision to distrust these specific SPKIs stems from a reported CA compromise. According to records in the Common CA Database (CCADB), the certificates associated with these SPKIs were revoked on October 18-19 due to a 'cACompromise' event. This action is a direct response to that security incident.
Impact on Go Applications
Applications built with Go that rely on the crypto/x509 package for certificate validation will no longer trust certificate chains containing these compromised eMudhra SPKIs. This update is intended to protect users from potential security risks associated with the compromised certificates.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub cmc_internal/api GitHub github/collect GitHub _view_fragments/issues GitHub golang/go GitHub _private/browser GitHub get-started/accessibilityReporting from
The Go crypto/x509 package will implement a mitigation to reject certificate chains containing eight specific Subject Public Key Info (SPKI) hashes from the eMudhra Certificate Authority. These certificates were revoked due to a CA compromise on October 18-19, as recorded in CCADB, necessitating this update to enhance security.