The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux

To test if impacted visit or curl this site: https://dv-g3b-emudhra.we-have-a-problem.com/

  • 4TBHMeCCL@suppo.fi
    link
    fedilink
    English
    arrow-up
    2
    ·
    18 hours ago

    If you use GrapheneOS, updating to 2026102100 (or higher) will take care of this for you.

    remove the active eMudhra ECDSA root certificate due to compromised intermediate certificates (Vanadium received the removal of this root certificate as an out-of-band component update via our servers when it was released for Chrome)

    remove both legacy eMudhra root certificates (this leaves the heavily used active RSA root certificate as the only remaining one and we’re considering either removing it or disabling it by default despite other platforms not removing it at this time)