Well, so what now? It's not like I have these in my system CA store, they're just intermediaries cross-signed by sectigo.
You can add the intermediate CA to your block list, presumably the distros will do this
Looks like archlinux already did. After update my fake st*pe.com cert no longer verifies. Ufff.
The problem now becomes all of the things that can't be so easily updated.
You can add the intermediate CA to your block list, presumably the distros will do this
Looks like archlinux already did. After update my fake st*pe.com cert no longer verifies. Ufff.
The problem now becomes all of the things that can't be so easily updated.