logoalt Hacker News

deathanatos • today at 6:58 PM • 2 replies • view on HN

Why are the intermediates, and not the root cert, being revoked?

The intermediates seem to be difficult in that the root stores don't seem to have a mechanism for it (… kinda seems like an oversight, at this 20:20 vision point?). If eight of the CA's intermediates are hosed … how many are still "good", and are they good good, or are we just fooling ourselves?


Replies

QuiEgo • today at 8:53 PM

At least Google and Mozilla are revoking the roots too

justincormack • today at 8:19 PM

There are 30k websites using certs chained to that root

➕ show 1 reply