3 ms·

Thanks to the ridiculousness that is the CAs system, Comodo losing their root cert private key is nuclear meltdown regardless if you are their customer or not.

Thanks to the ridiculousness that is the CAs system, Comodo losing their root cert private key is nuclear meltdown regardless if you are their customer or not. Browsers trust Comodo, if an attacker MITMs a client connecting to your site and presents a cert signed by Comodo, that will be accepted (unless the client previously visited your site and your site uses HKPK, but I think that's discouraged/broken for some reason, since I'm not seeing it on popular sites?).

oasisbob 11y ago
I think cm2187 was referring to the CA death penalty with the "lose their cert" reference. ie, Browsers decide to reject Comodo CAs from their trust store. One would hope that losing control of HSM-stored crypto material is improbable, regardless of other questionable security practices.