Apple today released macOS updates that address a security gap involving compromised eMudhra certificates, after initially blocking them in Safari, Mail, and other apps in October. Here are the details.

A bit of context

A few weeks ago, Mozilla reported that private keys of eight intermediate certificate authorities operated by eMudhra, an Indian digital certification company, had been compromised.

In essence, these certificates are used to establish trust in digital certificates that verify website identities and enable secure connections.

With access to the compromised private keys, bad actors could potentially create fraudulent certificates that appear legitimate, allowing them to impersonate websites and intercept sensitive user information.

In response to the compromise, Apple began automatically blocking the affected certificates on October 19, followed by additional protections on October 23.

These changes were delivered through automatic certificate configuration updates, meaning users didn’t…