Hacker News Reader

Comment by dcrazy | Hacker News Reader

iOS absolutely uses a CRL, and Apple has revoked the eMudhra certs as of this morning: https://www.macrumors.com/2026/10/22/apple-blocks-certificat...

View on HN

> Apple introduced the blocks on October 19

So actually 3 days ago.

It must be broken/buggy then.

For your own sake and the sake of anyone else who might be hitting this bug, I suggest you open applefeedback:// in Safari, file a bug, and post the FB number here or on the Apple Developer Forums.

I've reported it (I can verify the CRL check either failed or the CRL does not include the CA certs). No FB number was provided.

How did you report it? If you used Feedback Assistant then it would have given you an FB number. That’s the only way to be sure anyone at Apple sees it.

I selected the applefeedback:// url you shared and used "look up" (there's no "open link" option). That sent me to the official Apple feedback site. Are you saying that site's submissions aren't checked or something else?

No, that’s the right path. Your report should have an FB number.

Ah well. Guess it's as broken as the CRL, or I just clicked the buttons wrong or something. I just saw a thank you screen. I checked my email in case they sent something there, but nah.

The good news is that Safari finally stopped loading the certificate test page I've been using: https://dv-g3b-emudhra.we-have-a-problem.com/

For me I had to go back to the feedback assistant home page, refresh (swipe down), then it showed up under 'Recent activity'.

Done, it's FB25286974 if anyone from Apple is reading.

I also posted to security.apple.com, but they say they typically look at reports "within a week".

Report OE11044088569486, but currently it's just under review and invisible.

Would you expect those on iOS 27.0[.0] to get the update?

… or you’re on a list

My phone still accepts 3 of the 14 chains. So something is broken.

Too old to edit… after restarting my phone all chains are rejected.

Reply on news.ycombinator.com