You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
NetworkArea: what it touches
ImprovementsKind: in v2.1.307,
ImprovementsSection of the release
What
Some organizations add their own certificates (files that tell a program which secure servers to trust) to the connection that Claude Code's agent proxy relays through. Claude Code now checks that set of certificates before using it, under the label "agent proxy trust".
If the whole set passes, it is used as before.
If the set fails as a whole, each certificate is checked on its own and the bad ones are dropped.
If there are no certificates at all, the result is empty.
Why
One broken certificate no longer spoils the whole set, so the good certificates still work.
