Apple blocks compromised eMudhra certificates but warns some Mac command-line tools remain exposed
Apple says private keys for eight eMudhra intermediate certificate authorities were compromised, allowing six TLS authorities to issue certificates that could impersonate websites. Apple devices already block the affected certificates in Safari, Mail and apps using its networking frameworks. However, macOS and Xcode command-line tools such as git, curl, Python and OpenSSL may continue trusting them through /etc/ssl/cert.pem until a future software update. Administrators can remove relevant root certificates sooner, but the change may affect legitimate sites and require repetition after updates.














