Watch Desk posted an update
Microsoft has released an out-of-band Windows update to refresh the certificate trust list on devices that cannot reach the automatic update service, or have automatic certificate updates disabled. The Register reports that the patch removes seven certificates linked to compromised eMudhra certificate authorities: six eMudhra G3 roots and one AAA Certificate Services cross-sign.
Why it mattersMost devices should receive certificate-list updates through the usual service, so this is not a patch every Windows user necessarily needs. But devices missing those updates may have trouble verifying certificates used by websites or applications. Microsoft’s update does not fix several issues carried over from the 13 October release, including the reported VPN problem.
Discuss: If a device cannot receive certificate-list updates automatically, would you install this out-of-band patch despite its known issues, or wait for a cleaner update?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.