Skip to content

Comment on DigiCert Revocation Incident (CNAME Domain Validation)parent

Comments

I definitely commend DigiCert for pledging to revoke the certificates within 24 hours and not having a delayed revocation or trying to language lawyer their way to a 5 day revocation as other CAs have tried.

It seems I spoke too soon: https://bugzilla.mozilla.org/show_bug.cgi?id=1910322#c8

Having a restraining order served on them is going to slow things down a bit.

That only affects 72 certificates. They've delayed revocation for all 83,000+.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.