↓Skip to main content
Zeitgeist — a spike by Chris Gathercole
  1. Creators/
  2. Simon Willison — Creator of Datasette; co-creator of Django/

eMudhra Intermediate CA Compromise

Blog · Watch/Read · (gathered 2026-10-21)

  • Simon Willison reports the “very, very bad news” that the private keys of eight eMudhra intermediate CA certificates have been compromised.
  • This compromise is critical because these CAs chain to root programs trusted by major platforms including Mozilla, Microsoft, Apple, and Chrome, impacting numerous downstream trust stores.
  • A practical takeaway is that all software bundling trusted certificates needs immediate updates; specific examples include Linux ca-certificates packages and Python tools uv (0.13.4), pip (26.2.2), and certifi (2026.10.19), which have already released updated certificate lists.