{"type":"analysis","id":"analysis:a-browser-block-cannot-update-the-certificate-bundle-inside-your-app","slug":"a-browser-block-cannot-update-the-certificate-bundle-inside-your-app","title":"A browser block cannot update the certificate bundle inside your app","description":"The eMudhra compromise shows that trust-store remediation has separate delivery paths: browser protections may arrive centrally, while packaged CA lists still need maintainer releases and operator deployment.","published_at":"2026-10-21T08:00:00.000Z","updated_at":"2026-10-21T08:00:00.000Z","record_date":"2026-10-21","topics":["trends"],"source_urls":["https://simonwillison.net/2026/Oct/20/emudhra-certificates","https://blog.cloudflare.com/emudhra-certificate-compromise","https://blog.cloudflare.com/pq-ca-with-mtcs","https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents"],"language":"en","routes":{"html":"https://newruntime.com/analysis/a-browser-block-cannot-update-the-certificate-bundle-inside-your-app/","markdown":"https://newruntime.com/analysis/a-browser-block-cannot-update-the-certificate-bundle-inside-your-app.md","json":"https://newruntime.com/analysis/a-browser-block-cannot-update-the-certificate-bundle-inside-your-app.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"story_cluster:emudhra-intermediate-ca-key-compromise-and-certificate-store-updates-b5cf8fefd157","authorial_article_id":"ede60c6d-3566-493a-85d6-b820906f7a3a"},"next_reads":[{"type":"topic","path":"/topics/trends/","url":"https://newruntime.com/topics/trends/","title":"Trends","reason":"Explore the trends topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/trends.md","json_url":"https://newruntime.com/topics/trends.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}