The emudhra debacle might turn out to be an accidental boon for keeping devices like this running.

To a point anyway.

wouldn't they have to be an emudhra customer (their ssl certs signed by emudhra)?

If I understood correctly, emudhra was able to issue certificate to any website.

Therefore if some device trusts emudhra root certificate...

	▲	onedognight 2 hours ago \| parent \| next [-]
		Google usually does certificate pinning. They know that the CA root store is not to be trusted to sign for their own domains.
	▲	onedognight 2 hours ago \| parent \| prev [-]
		[flagged]