logoalt Hacker News

gwittel • today at 5:29 PM • 3 replies • view on HN

Yikes. I’d have to wonder if this CA should even be trusted ever again?


Replies

AlotOfReading • today at 5:43 PM

Definitely not. Their CPS requires that these keys be generated by an HSM and no HSM would ever generate these, so there's little reason to believe they're following any of their other controls.

➕ show 2 replies
wolvoleo • today at 8:50 PM

Yeah IMO they should just close up shop. Just like Diginotar.

They had one job, and they blew it. The system is based on trust and they've lost it.

I'm going to remove their roots from all my stuff in any case.

red-iron-pine • today at 5:43 PM

it should not