Thank you so much man! I’ve disabled their certificates. How do I do this on windows?
Good question. Haven’t used Windows for so long, I don’t quite remember. But I do remember seeing certs somewhere. Try googling it!
there’s 4 of them, coincidence or conspiracy?
Well now you’ve put me on a list. Thanks.
Some number of years ago I worked in support for a mobile phone manufacturer. I spoke with one person who found themselves on the certificate section of Android and had disabled every non-american certificate then was shocked when their device basically stopped working…
FYI, G3 is the only one listed with the issue, the others are fine AFAIK. But if you don’t trust eMudhra at all after that, then that’s fair.
Edit: Actually it’s the intermediate certs that are compromised, the roots are still fine, but many of them come from the G3 root cert (and Sectigo’s AAA Certificate Services)
Excerpt from that page, for Android:
- eMudhra Technologies Limited: emSign ECC Root CA - G3
- Comodo CA Limited: AAA Certificate Services
Of course, people using an Android variant that still gets regular updates are unlikely to need manual disables, since an update will take care of it.
