Tag
As of October 28, Apple's macOS developer tools including git, curl and python3 still trust the compromised eMudhra certificates, and macOS 27.2 reverted manual workarounds, leaving HTTPS connections and credentials potentially interceptable while other projects shipped fixes earlier.
Apple 已开始在设备上屏蔽被入侵的 eMudhra 中间 CA 签发的 12 张 TLS 证书及相关根证书，防止攻击者利用泄露的私钥伪造任意网站的合法证书。命令行工具如 curl 和 git 仍需等待未来 macOS 更新才能完全阻止这些证书。