GoKawiilApple revokes 8 flawed web certificates, but macOS may still trust them
Apple has revoked eight intermediate web certificates after a script flaw left their private keys guessable by testing just 256 possible values. Apple, Google and Mozilla have all blocked the certificates in their browsers, but Mozilla engineer Dennis Jackson warns that macOS and its built-in curl utility don't check revocation status, so Macs that already trusted these certificates could keep doing so.