Apple 的 git 仍信任已失陷的 eMudhra 证书
Apple's git still trusts the compromised eMudhra certificates
HN 1191 分的报告称:Apple 的 git 实现仍然信任已失陷的 eMudhra 证书[1]。它要解决的是证书吊销的落地滞后:即使根证书被判定失陷,下游工具链仍可能按旧信任链验证。技术上的关键是吊销列表的分发与客户端更新节奏。参考价值是证书信任不是一次性配置,而是持续运营;限制是报告针对特定平台与版本,修复状态需官方确认。
A report at 1191 points on HN says Apple's git still trusts the compromised eMudhra certificates[1]. It addresses the lag between certificate revocation and enforcement: even when a root is judged compromised, downstream toolchains may still validate against the old chain. The technical crux is revocation distribution and client update cadence. The reference is that certificate trust is continuous operations, not one-off configuration; the limitation is that the report targets a specific platform and version, and fix status needs official confirmation.