About the compromised eMudhra intermediate CAs
Comments on “About the compromised eMudhra intermediate CAs”
Claim-checked. Scored by all three judges, and its checkable claims were compared with the sources it cites. How far stories are checked
Apple is blocking 12 certificates from six eMudhra intermediate CAs whose private keys were compromised, plus the emSign ECC Root CA - G3 since 23 October. Safari, Mail and apps using Apple's frameworks are covered automatically. Command-line tools such as curl, git, openssl and python3 read /etc/ssl/cert.pem and skip Apple's block until a future macOS update. Administrators can remove the emSign root and AAA Certificate Services from that file, which may break verification of some unaffected sites. Apple's page is the only source, and the claims are unverified elsewhere.
Why it ranked
No. 3 of 93 with a score of 0.72. The panel rated it highest on new information (0.95) and substantiated (0.90), lowest on audience breadth (0.57).
Every answer behind this is in the table under Score.
Score
0.72total under rubric v2.2
- Significance0.64
- Reader interest0.72
- Audience breadth0.57
- Practical relevance0.83
- Substantiated0.90
- Technical depth0.84
- New information0.95
- Counts against: Promotional0.04
- Counts against: Overclaim0.08
Each judge’s answer per question (0–1), their mean and spread, and what the question adds to the score (weight × mean).
| Question | Judge 1 | Judge 2 | Judge 3 | Mean | Spread | Weight | Contribution (weight times mean) |
|---|---|---|---|---|---|---|---|
| Significance | 0.66 | 0.55 | 0.72 | 0.64 | 0.17 | +0.24 | +0.154 |
| Reader interest | 0.58 | 0.72 | 0.86 | 0.72 | 0.28 | +0.26 | +0.187 |
| Audience breadth | 0.52 | 0.60 | 0.58 | 0.57 | 0.08 | +0.13 | +0.074 |
| Practical relevance | 0.82 | 0.85 | 0.83 | 0.83 | 0.03 | +0.22 | +0.184 |
| Substantiated | 0.88 | 0.85 | 0.98 | 0.90 | 0.13 | +0.05 | +0.045 |
| Technical depth | 0.99 | 0.80 | 0.74 | 0.84 | 0.25 | +0.05 | +0.042 |
| New information | 0.95 | 0.90 | 0.99 | 0.95 | 0.09 | +0.05 | +0.047 |
| Promotional | 0.06 | 0.05 | 0.01 | 0.04 | 0.05 | −0.19 | −0.008 |
| Overclaim | 0.11 | 0.10 | 0.02 | 0.08 | 0.09 | −0.11 | −0.008 |
| Sum of contributions | +0.717 | ||||||
| Claim-check penalty | 0.000 | ||||||
| Total, as published | 0.717 | ||||||
Spread is the highest minus the lowest judge answer. marks a spread above 0.40: the judges disagree, and the story is marked contested.
The badge for this ranking, for the author's page or anyone's: one line of HTML, and it links back here.
<a href="https://rubric.hrih.si/editions/2026-10-25/3/"><img src="https://rubric.hrih.si/badge/2026-10-25/3.svg" alt="Ranked #3 on Rubric, 25 Oct 2026" width="238" height="28"></a>Claim check
Claim check: 8 no source given. Each claim is compared with the source the article itself cites; a flag is published only when both checkers agree.
No source givenDate
Apple has been blocking the certificates of the compromised eMudhra intermediate CAs that issue TLS certificates since 19 October 2026.
The article gives no link or citation for it.
The article says “Since 19 October 2026, Apple has been blocking the certificates of the compromised eMudhra intermediate Certification Authorities (CAs) that issue TLS certificates”
The source says No source to compare with.
No source givenNumber
The private keys of eight intermediate CAs operated by eMudhra were compromised.
The article gives no link or citation for it.
The article says “The private keys of eight intermediate CAs operated by eMudhra were compromised”
The source says No source to compare with.
No source givenNumber
Two of the compromised CAs issue code signing certificates, which Apple's frameworks don't trust, and the other six issue TLS certificates.
The article gives no link or citation for it.
The article says “Two of these CAs issue code signing certificates, which Apple's frameworks don't trust. The other six issue TLS certificates”
The source says No source to compare with.
No source givenCausal conclusion
eMudhra and Sectigo have revoked the affected certificates.
The article gives no link or citation for it.
The article says “eMudhra and Sectigo have revoked the affected certificates”
The source says No source to compare with.
No source givenCausal conclusion
Someone with keys from the six TLS CAs could create certificates that appear valid for any website.
The article gives no link or citation for it.
The article says “Someone with keys from these six CAs could create certificates that appear valid for any website”
The source says No source to compare with.
No source givenDate
Apple began blocking the 12 certificates on 19 October 2026 and also began blocking the emSign ECC Root CA - G3 on 23 October 2026, delivered automatically without a software update.
The article gives no link or citation for it.
The article says “On 23 October 2026, Apple also began blocking the emSign ECC Root CA - G3”
The source says No source to compare with.
No source givenGeneralization
macOS command-line tools including curl, git, python3, ruby, perl, and openssl check certificates against /etc/ssl/cert.pem and don't check Apple's block or revocation for certificates chaining to roots in that file.
The article gives no link or citation for it.
The article says “these tools don't check Apple's block or whether the certificate has been revoked”
The source says No source to compare with.
No source givenCausal conclusion
Removing emSign ECC Root CA - G3 from the file doesn't block the six Sectigo cross-signed certificates, because the tools can still verify them through AAA Certificate Services.
The article gives no link or citation for it.
The article says “Removing emSign ECC Root CA - G3 doesn't block the six certificates that Sectigo cross-signed, because these tools can still verify them through AAA Certificate Services”
The source says No source to compare with.
Also covered by
No other coverage was clustered with this story.
Elsewhere
Elsewhere: HN 4 pts, not on front page
Recorded for context only, checked 25 Oct 2026, 05:46 UTC. It played no part in the ranking.