robrain

My previously working, then broken iOS and iPadOS browsers now work and have done for the last hour. Who knows why.

What joy. Not much of a punishment.

I also posted to security.apple.com, but they say they typically look at reports "within a week".

Report OE11044088569486, but currently it's just under review and invisible.

Cool.

Checking Keychain access shows none of the intermediates, but it does have the emSign ECC Root CA - G3. Manually setting that to "Never Trust" stops the Mac browsers seeing the intermediate test sites as it should.

I didn't go into this much detail this morning, so I don't know if previously the revocation from Apple hit the root as well as the intermediates. But right now, on my Mac, trusting that Root lets my browsers connect to the Intermediate CA ending C=NL. Switch the trust off and I go back to green "Did not connect".

I guess the ball is in Apple's court as far as the iOS family goes.

EDIT: intriguingly (to me at least), the AAA Certificate Service Root is still Trusted, yet the intermediates chained to it are all green "Did not connect"

EDIT: I'm not promoting this nuclear option as a "solution" by the way, merely presenting some diagnostic information to help the group mind.

Mine were all blocked this morning when I informed my family of the mitigation methods.

I've just been rechecking everything and both iOS and MacOS browsers (Safari and Orion tested) now accept one (for MacOS, 27.0.1) or three (for iOS, 27.0.1) of them. I know the revocation is not an OS update, just including the version number for completeness.

EDIT: iPadOS with the same browsers continues to pass the tests.

Further EDIT: iPadOS now accepts one of them. This has to be a load issue on the "got a problem site", surely? Maybe a check for a certificate error message that never hits because a timeout beats it?

Arrant nonsense, surely?

Not just you.

Sold mine after running it a few months covered with stickers saying what I thought of him. Drive another EV now and will not go back. No discount on the car. Stop generalizing.

- Fluent Python

- Middlemarch

Something from every food group there.

Yesterday I learnt that Samsung has a Royal Warrant in the UK.

TIL that they really shouldn’t.

1. No, losses similar to cable charging, ie cents per charge impact. People lose more by leaving their roof rack/bike rack on year round, I suspect.

2. Nobody is going to buy these cars except for millionaires (and delusional credit-hounds), so that's not a problem either.

It might not work for you, and that's cool, but for someone spending that much on a car it's just a small percentage increase in lease payments. And on the Porsche they might have spent as much on a custom colour as on this item.