The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux

To test if impacted visit or curl this site: https://emudhra.we-have-a-problem.com/

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 weeks ago

If you use GrapheneOS, updating to 2026102100 (or higher) will take care of this for you.

remove the active eMudhra ECDSA root certificate due to compromised intermediate certificates (Vanadium received the removal of this root certificate as an out-of-band component update via our servers when it was released for Chrome)

remove both legacy eMudhra root certificates (this leaves the heavily used active RSA root certificate as the only remaining one and we're considering either removing it or disabling it by default despite other platforms not removing it at this time)

  • source