eMudhra TLS leak: Apple leaves macOS command-line issue unresolved
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Apple has not yet fixed a certificate problem in macOS command-line tools that stems from a compromise at certificate authority eMudhra, which could let attackers impersonate servers in some network positions.