{
  "@context": "https://schema.org",
  "@id": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-20-go-will-reject-certificate-chains-containing-eight/#webpage",
  "@type": [
    "WebPage",
    "ArchiveComponent"
  ],
  "articleBody": "We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.\n\nVerify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.\n\nWe highly recommend immediately upgrading to this release.\n\nThis is CVE-2026-111943 and Go issue [https://go.dev/issue/82345](https://go.dev/issue/82345).\n\n* * *\n\nThis was an [URGENT track](https://go.dev/doc/security/policy#urgent) issue originally tracked in [http://b/575512169](http://b/575512169).\n",
  "authors": [
    "mendym"
  ],
  "captured_at": "2026-10-20T12:56:01.525437407+00:00",
  "category": "news",
  "content_html": "<p>We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.</p>\n<p>Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.</p>\n<p>We highly recommend immediately upgrading to this release.</p>\n<p>This is CVE-2026-111943 and Go issue <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://go.dev/issue/82345\">https://go.dev/issue/82345</a>.</p>\n<hr />\n<p>This was an <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://go.dev/doc/security/policy#urgent\">URGENT track</a> issue originally tracked in <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"http://b/575512169\">http://b/575512169</a>.</p>\n",
  "content_markdown": "We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.\n\nVerify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.\n\nWe highly recommend immediately upgrading to this release.\n\nThis is CVE-2026-111943 and Go issue [https://go.dev/issue/82345](https://go.dev/issue/82345).\n\n* * *\n\nThis was an [URGENT track](https://go.dev/doc/security/policy#urgent) issue originally tracked in [http://b/575512169](http://b/575512169).\n",
  "dateCreated": "2026-10-20T12:56:01.525437407+00:00",
  "date_created": "2026-10-20T03:05:07+00:00",
  "date_modified": "2026-10-20T03:05:07+00:00",
  "date_published": "2026-10-20T03:05:07+00:00",
  "description": "We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preventing them from being returned to the…",
  "external_url": "https://github.com/golang/go/issues/82345",
  "git": {
    "commit": "ebb0941c5c06a2ab2377342d607535262a3e969e",
    "path": "items/hnrss-org/2026/10/2026-10-20-go-will-reject-certificate-chains-containing-eight.md",
    "permalink": "https://github.com/aymericbeaumet/aggr-instance/blob/ebb0941c5c06a2ab2377342d607535262a3e969e/items/hnrss-org/2026/10/2026-10-20-go-will-reject-certificate-chains-containing-eight.md"
  },
  "id": "urn:aggr:item:4347f42328fd94681cbc95ff2ab6ec771c79fc6d",
  "isBasedOn": {
    "@id": "https://github.com/golang/go/issues/82345"
  },
  "mainEntity": {
    "@id": "https://github.com/golang/go/issues/82345",
    "@type": "CreativeWork",
    "archivedAt": {
      "@id": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-20-go-will-reject-certificate-chains-containing-eight/#webpage"
    },
    "author": [
      {
        "@type": "Person",
        "name": "mendym"
      }
    ],
    "dateModified": "2026-10-20T03:05:07+00:00",
    "datePublished": "2026-10-20T03:05:07+00:00",
    "headline": "Go will reject certificate chains containing eight distrusted SPKIs",
    "image": {
      "@type": "ImageObject",
      "caption": "We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preve...",
      "height": 90,
      "url": "https://opengraph.githubassets.com/90d06a2ec5816d5fc7b049bf1df65c1e9fcbdd836299c80184753809a74f7e69/golang/go/issues/82345",
      "width": 160
    },
    "timeRequired": "PT1M",
    "url": "https://github.com/golang/go/issues/82345",
    "wordCount": 68
  },
  "name": "Archived snapshot: Go will reject certificate chains containing eight distrusted SPKIs",
  "preview": {
    "alt": "We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preve...",
    "color": null,
    "height": 90,
    "placeholder": {
      "data_url": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=",
      "hash": ""
    },
    "url": "https://opengraph.githubassets.com/90d06a2ec5816d5fc7b049bf1df65c1e9fcbdd836299c80184753809a74f7e69/golang/go/issues/82345",
    "width": 160
  },
  "reading_minutes": 1,
  "replicated_at": null,
  "source": "hnrss-org",
  "source_name": "Hacker News: Front Page",
  "summary": null,
  "tags": [],
  "temporalCoverage": "2026-10-20T12:56:01.525437407+00:00",
  "title": "Go will reject certificate chains containing eight distrusted SPKIs",
  "url": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-20-go-will-reject-certificate-chains-containing-eight/",
  "word_count": 68
}