you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 14 hours ago*

almost certainly means their package managers won't download dependencies over https using those certs.

in fact, there's a link right there in the article with a list, and sure enough it's package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909

  • source
  • parent