On: Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

[asveikau]

I guess everybody is lying when they say to patch nodejs and python's certifi in response to this issue. They should listen to you instead about how it doesn't work that way, and stay vulnerable to MITM.

[creatonez → asveikau]

On second look, I guess I'm wrong about Node.js... shockingly, they follow in Java's idiotic footsteps and do use a builtin root store by default.

Is certifi used widely in the Python ecosystem?