Comment by alt227
8 hours ago
Im guessing this only affects Go? But I am guessing that from the nist page as none of the headlines mention it at all.
8 hours ago
Im guessing this only affects Go? But I am guessing that from the nist page as none of the headlines mention it at all.
No it affects everybody, but most browsers/OSs etc have updated already. This is just a workaround Go put in case the underlying OS has not been updated. Not sure why this link is on the front page as it duplicates previous posts and confuses people, I think it should be merged.
Here is the original story: https://news.ycombinator.com/item?id=50166579
Thanks for clarifying
As of last night the AWS Corretto JDK still ships a trust store that trusts those compromised certs, too.