# Go security releases block eight certificate authority keys

_Published Tuesday, October 20, 2026 at 9:17 AM EDT · Security · Latest · Tier 2 — Notable_

![Go security releases block eight certificate authority keys — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgh12Jum-ReZMOyqaMubiLlMwx4-uDVxEJkD6-CJabWhHfCKV-Csw7P4MoeRX85Ag-3rxZMftHE6KGcdh059DoOPvF1Mirv05BQsflmg8RroWBt_t00BGTHsdhqkmVWVuRHKAs56AhNfdsq_YH0QWrMJ1z4dFT3I3xOK7Dwqu7aPp_P7tFSxQ-bzqyz8e4/s1700-nu-rw-lo-l85-e365/go-certs.jpg)

Go 1.27.3 and Go 1.26.10, released October 20, reject certificate chains passing through eight intermediate certificate authority keys, The Hacker News reports. The Go team recommends immediate upgrades, citing security concerns about an unnamed certificate authority's operation.

The filter checks public keys, so it also catches copies signed by different roots. It applies to Go's verifier and its macOS and Windows operating-system verification paths, with no setting to disable it, including for programs supplying their own trusted roots.

Programs retain the old behavior until rebuilt. Services using certificates that chain through the blocked keys need certificates from a different intermediate to remain accessible to rebuilt Go clients.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html)

---
Canonical: https://techandbusiness.org/newswire/7l01w2H2fTWkug8hLftX98
Published: 2026-10-20T13:17:09.255Z
Story chronology: 2026-10-20T11:32:59.000Z
Retrieved: 2026-10-20T16:21:36.688Z
Publisher: Tech & Business (techandbusiness.org)