On: Go will reject certificate chains containing eight distrusted SPKIs

[Aissen]

There are links to pretty readable changesets, so you can go read and understand exactly what's happening instead of speculating.