logoalt Hacker News

orbital-decaytoday at 5:27 PM1 replyview on HN

All this doesn't matter. What matters is the destructive potential and a breach of trust. CAs have been distrusted for less.


Replies

john_strinlaitoday at 5:45 PM

>CAs have been distrusted for less.

root programs are super specific about root cause analysis, what actions lead up to distrust, differentiating deliberate maliciousness from systemic incompetence, etc.

its like the exact opposite of "all this doesnt matter".

of course they still look at the outcome (danger to users, etc.), typically as a first step. but they take great care to determine exactly what lead up to a specific outcome.

show 1 reply