Go will reject certificate chains containing eight distrusted SPKIs
Google’s Go language runtime is being updated to refuse TLS certificate chains that include any of eight specific Subject Public Key Identifier (SPKI) values that have been deemed untrusted. The change tightens security by preventing connections to servers presenting certificates with those SPKIs, aligning Go’s behavior with broader industry efforts to block compromised or weak cryptographic keys.