Unsloth Watch posted an update
An Unsloth Desktop code change updates its Rust certificate checks to reject chains using compromised eMudhra and emSign intermediate keys. It has passed the project’s tests, but users will need a Desktop release to receive the fix.
Why it mattersThe change addresses a specific Linux risk: systems whose certificate store still trusts the affected roots could accept the compromised chains. The commit says macOS and Windows use their operating systems’ certificate verifiers instead.
Discuss: Should desktop apps add their own certificate distrust rules when operating-system stores have not caught up, or leave that job to the OS?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.