If anyone else here uses AdGuard, the latest version of their app rejects the affected certificates. ๐
Shouldnt you also disable the "Comodo" ones?
there's 4 of them, coincidence or conspiracy?
I once tried to disable all but the ones I actually need. There are close to 200 CAs trusted by my devices and I only need to trust about 15 of them. But it's a colossal pain in the ass to figure out which CA an app needs, so I abandoned that experiment.
FYI, G3 is the only one listed with the issue, the others are fine AFAIK. But if you don't trust eMudhra at all after that, then that's fair.
Edit: Actually it's the intermediate certs that are compromised, the roots are still fine, but many of them come from the G3 root cert (and Sectigo's AAA Certificate Services)
Thanks for reminding me to do that!
Why isn't this a change pushed by Google?
Where did you find that?
all 38 comments