ZeroCool@piefed.ca to Technology@lemmy.zipEnglish · 16 days agoThe Internet goes on high alert after discovery of 8 compromised TLS certsarstechnica.comexternal-linkmessage-square3linkfedilinkarrow-up143arrow-down11 cross-posted to: technology@piefed.socialtechnology@lemmy.worldlinux@lemmy.mltechnology@lemmy.ml
arrow-up142arrow-down1external-linkThe Internet goes on high alert after discovery of 8 compromised TLS certsarstechnica.comZeroCool@piefed.ca to Technology@lemmy.zipEnglish · 16 days agomessage-square3linkfedilink cross-posted to: technology@piefed.socialtechnology@lemmy.worldlinux@lemmy.mltechnology@lemmy.ml
minus-squareanewfox@lemmy.ziplinkfedilinkEnglisharrow-up2·16 days agoalmost certainly means their package managers won’t download dependencies over https using those certs. in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909
almost certainly means their package managers won’t download dependencies over https using those certs.
in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909