I think cm2187 was referring to the CA death penalty with the "lose their cert" reference. ie, Browsers decide to reject Comodo CAs from their trust store. One

I think cm2187 was referring to the CA death penalty with the "lose their cert" reference. ie, Browsers decide to reject Comodo CAs from their trust store. One would hope that losing control of HSM-stored crypto material is improbable, regardless of other questionable security practices.