Four no more: macOS 27.3 kills off those stupidly insecure certificates
In the wake of the shockingly insecure security certificate fiasco, Apple has now completely blocked the compromised eMudhra certificates in macOS 27.3 . The security certificates were far from secure. In October, security researchers discovered that a number of certificates issued by one certificate authority were woefully insecure , to an obscene degree. While Apple has worked to block the certificates from being used, the current developer beta round goes one stage further. After the discovery of the astoundingly weak certificates, Apple was able to stop the affected certificates from being used on iOS , iPadOS , and its other operating systems. However, as the curl utility in macOS doesn't check revocation information, Macs that had previously trusted the certificates would continue to do so, despite Apple's measures. Continue Reading on AppleInsider | Discuss on our Forums
What happened?
In the wake of the shockingly insecure security certificate fiasco, Apple has now completely blocked the compromised eMudhra certificates in macOS 27.3 . The security certificates were far from secure. In October, security researchers discovered that a number of certificates issued by one certificate authority were woefully insecure , to an obscene degree. While Apple has worked to block the certificates from being used, the current developer beta round goes one stage further. After the discovery of the astoundingly weak certificates, Apple was able to stop the affected certificates from being used on iOS , iPadOS , and its other operating systems. However, as the curl utility in macOS doesn't check revocation information, Macs that had previously trusted the certificates would continue to do so, despite Apple's measures. Continue Reading on AppleInsider | Discuss on our Forums
Story details
In the wake of the shockingly insecure security certificate fiasco, Apple has now completely blocked the compromised eMudhra certificates in macOS 27.3 .
The security certificates were far from secure.
In October, security researchers discovered that a number of certificates issued by one certificate authority were woefully insecure , to an obscene degree.
Why it matters
This page keeps Apple rumors separate from official updates, so readers can follow early reports without confusing them with confirmed announcements.