01
Security
Microsoft removes trust in eMudhra certificates after weak CA keys found
Systems that depend on the removed roots may need their certificates replaced, and disconnected machines must take the update manually.
Systems that depend on the removed roots may need their certificates replaced, and disconnected machines must take the update manually.
Both features are limited to desktop in the US and Canada for now, with other countries due in the coming months.
Software that depends on web PKI but cannot filter intermediates stays exposed until its updates arrive.
Affected servers need patches for a PHP bug, and some certificates from one authority may still be trusted by a macOS utility.
Browsers and operating systems now reject the affected intermediates, but some software with its own trust store may keep accepting them until it is patched.
Chrome, Edge and the HTML standard now support server-driven streaming so usable page sections can render before the full response arrives.