Hacker News new | past | comments | ask | show | jobs | submit
mdavidn | on: Apple's git still trusts the compromised eMudhra certificates
Agreed. Why does macOS ship with two copies of the trust store? Shouldn't the process to update the primary store automatically derive the other?