Comment by megous
10 hours ago
Well, so what now? It's not like I have these in my system CA store, they're just intermediaries cross-signed by sectigo.
10 hours ago
Well, so what now? It's not like I have these in my system CA store, they're just intermediaries cross-signed by sectigo.
You can add the intermediate CA to your block list, presumably the distros will do this
Looks like archlinux already did. After update my fake st*pe.com cert no longer verifies. Ufff.
The problem now becomes all of the things that can't be so easily updated.