Every story tagged GO Programming, curated for CIOs and IT leaders — ranked by source credibility, engagement, and freshness.
1 story · open in the command center
A critical vulnerability exists in Go's X.509 certificate verification implementation where certificates with identical content but different ASN.1 encoding (specifically using tag 0x13 instead of 0x0c for string encoding) can bypass verification checks, while other standard tools like OpenSSL correctly validate them. This represents a significant security risk for Go applications relying on certificate validation for TLS, API authentication, and other cryptographic trust mechanisms. IT organizations must urgently audit Go-based systems handling certificate verification and prepare for patching once the Go team releases a fix.