logoalt Hacker News

_moof • yesterday at 8:04 PM • 0 replies • view on HN

> However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business

This isn't what taking responsibility looks like.

> eMudhra handled the recent incident diligently, revoking the affected CAs within 14 hours of discovery and disclosing promptly

It doesn't end there. It ends when you've investigated how this happened, identified the causes, and changed your procedures, systems, and/or culture to make sure it doesn't happen again.