Go will reject certificate chains containing eight distrusted SPKIs (github.com)

<a href="https://news.ycombinator.com/item?id=50160877">Comments</a>