πŸ” Go makes it easy to respond to the eMudhra certificate issue

2026-10-27  Β·  go, security, tls, update, linux, embedded, iot, tools

The recent eMudhra certificate issue increases the possibility of a man-in-the-middle attack on IoT devices. On a Linux-based edge device, updating the ca-certificates package fixes this, but a system update can take time to roll out. Apps written in Go have a faster option: rebuild with Go 1.26.10 or 1.27.3, which block the eight eMudhra intermediates regardless of the device’s CA bundle. Many systems update apps quickly and the OS slowly, so this gives a fix that ships on the fast path. I rebuilt Simple IoT with Go 1.27.3 and shipped it as a normal app update in v0.29.1.

Go is not the best at everything, but it is fast enough, secure enough, small enough, and reliable enough. That balance, plus excellent developer tooling, makes Go a pragmatic choice for small teams building connected devices.

Distrusting the eMudhra certificates reaches an edge device in hours through a Go app rebuild, or in weeks through an OS ca-certificates update