News about digital certificates

CertiK says crypto trading bots and exchange apps may remain exposed to the eMudhra certificate flaw even though Google, Apple and Microsoft have blocked eight vulnerable certificates issued by India's eMudhra. Many applications outside the browser ecosystem do not enforce Certificate Transparency or receive the same revocation protections, so browser fixes may not cover them. Attackers could use compromised certificates to impersonate HTTPS connections to exchanges, wallets and APIs, replacing deposit addresses or tricking users into approving malicious transactions, though this would also require intercepting or redirecting users' traffic. CertiK urges operators to update their software and certificate trust stores and verify that their applications reject the affected certificates.