Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Signed CacheArea: what it touches
Internal ChangesKind: in v2.1.288,
Internal ChangesSection of the release
What
Claude Code checks the certificates on its signed cache. A certificate is a digital credential that shows who issued something. Two things changed:
Trust: a fixed list of trusted root certificates is replaced by a single marker, urn:anthropic:claude-code:signed-cache:production, with the issuer named "Claude Code Signed Cache Issuing CA".
Reporting: the time a certificate has left before it expires is now reported in hours instead of days.
Why
This changes how Claude Code decides which signed cache certificates to trust. Nothing here shows a visible difference for you.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear whether verification behaves any differently for users.
Anthropic's release notes agreeFixed a plugin's pane showing nothing when one Code element held a diff that does not parse; it now draws as plain code
