Wed, Oct 21 Vulnerabilities and patches
Mozilla drops an eMudhra root because keys for 8 of its CAs are recoverable
Anyone can recover the keys from the certificates, so software that doesn’t get revocation updates needs new trust stores to stop trusting them.
Mozilla Security Blog, source for item 1 on Wed, Oct 21Mozilla dev-security-policy forum, source for item 1 on Wed, Oct 21Mozilla Bugzilla incident report, source for item 1 on Wed, Oct 21eMudhra intermediate CA compromise site, source for item 1 on Wed, Oct 21Cloudflare, source for item 1 on Wed, Oct 21Go announcement, source for item 1 on Wed, Oct 21