This happened in 2012 and caused a number of changes to various root programs[1]. Mozilla, for example, is now forcing CAs to disclose any subCAs they sign. Thi

This happened in 2012 and caused a number of changes to various root programs[1]. Mozilla, for example, is now forcing CAs to disclose any subCAs they sign. This is also from a time when the Baseline Requirements in its current form were not yet part of e.g. Mozilla's root policy (that only happened later in 2012). It also predates HPKP (and possibly the pinning mechanism Chrome used before that for their own domains, I'm not sure of the timeline). A lot has changed since that incident, and I have no doubt that the reaction to something like this would be different today, especially if a CA does this knowingly. [1]: https://wiki.mozilla.org/CA:Communications#February_17.2C_2012 https://wiki.mozilla.org/CA:Communications#February_17.2C_20...