SSL CA's marked as distrusted - June 2025

[sfx2000]

Just as a heads up - two more CA's have been marked as distrusted, so things like DoH/DoT/DNSSEC might have issues...

1) Chunghwa Telecom - Taiwan, ROC
2) Netlock - Budapest, Hungary

 

[randomName]

What's a CA ?

Sorry, and thanks

 

[sfx2000]

What's a CA ?

Sorry, and thanks

Good question.

At a high level, a Certifying Authority (CA) adds a level of trust, so if a CA is marked as distrusted, it impacts every cert downstream...