- Updated Envoy Docker images to drop trust in compromised eMudhra intermediate CAs.
- Removed AAA Certificate Services and emSign ECC Root CA G3 roots from Envoy Mobile's built‑in root bundle.
- Servers whose certificate chains rely on those roots are no longer trusted, addressing the CA key compromise.