Custom root pools and proxy trust after CVE-2026-111943
Custom root pools and proxy trust after CVE-2026-111943 Custom certificate authorities are common in private APIs, internal service meshes, and enterprise TLS inspection. CVE-2026-111943 forces teams to look at those trust designs because a locally trusted CA can still lead to a chain containing one of the eight compromised eMudhra intermediates. The flaw is in Go's crypto/x509 verification code.…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.