Skip to content

1.5.0-beta.mainnet

Latest
Latest

Choose a tag to compare

View all tags
@SlavaSereb SlavaSereb released this 22 Oct 17:26
· 1 commit to main since this release
v1.5.0-mainnet-beta
1ec8697
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • New ca-blocklist module with the SPKI SHA-256 hashes of the 8 compromised intermediates (each hash covers both the emSign-issued and the Sectigo cross-signed certificate) plus the 2 emSign G3 roots that Mozilla and Chrome distrust. Sectigo AAA and emSign Root CA - G1 are deliberately not blocked.
  • Node path: wraps tls.checkServerIdentity at the top of the main entry and walks the issuer chain. Rejects with ERR_TLS_CERT_DISTRUSTED.
  • Chromium path: session.setCertificateVerifyProc on the sessions listed below. Rejects with net::ERR_CERT_REVOKED.
    *scripts/verify-ca-blocklist.js, run with npx electron scripts/verify-ca-blocklist.js.
Assets 4
Loading