macOS update silently re-adds eMudhra root certs users had removed

steipete · x · 2026-10-30

Security researcher QuinnyPig reports that the latest macOS update rolled back his manual removal of the eMudhra (emSign) root certificates from /etc/ssl/cert.pem, questioning what Apple is doing. A forwarded screenshot shows an AI assistant verifying that all four emSign roots (ECC C3/G3, C1/G1) are back in the 128-cert bundle modified October 22, and in the .bak file. The Indian CA's roots being restored to the system trust chain has drawn criticism from the security community.

Related event: macOS Update Silently Restores Removed eMudhra Root Certificates(2 posts)→

Original post →

More from Infra

Infra channel →