This post was originally published on this site

In the wake of the shockingly insecure security certificate fiasco, Apple has now completely blocked the compromised eMudhra certificates in macOS 27.3.

Person using a slim black laptop on a white desk, with the screen filled with dense green code-like text on a black background, suggesting programming or cybersecurity work
The security certificates were far from secure.

In October, security researchers discovered that a number of certificates issued by one certificate authority were woefully insecure, to an obscene degree. While Apple has worked to block the certificates from being used, the current developer beta round goes one stage further.

After the discovery of the astoundingly weak certificates, Apple was able to stop the affected certificates from being used on iOS, iPadOS, and its other operating systems. However, as the curl utility in macOS doesn’t check revocation information, Macs that had previously trusted the certificates would continue to do so, despite Apple’s measures.

Continue Reading on AppleInsider | Discuss on our Forums