4 ms·
The question here isn't whether BlueCoat would go out of business, but rather Symantec. I don't like Symantec, nor do I like BlueCoat. That being said, we have
by pfg 10y ago
The question here isn't whether BlueCoat would go out of business, but rather Symantec. I don't like Symantec, nor do I like BlueCoat. That being said, we have no evidence that this certificate was used for misissuance. Symantec claims that BlueCoat never had access to the private key. The certificate was disclosed to Mozilla's root program. I have no idea why Symantec would agree to sign a certificate for an organization like BlueCoat - the PR damage has to be devastating. It would make even less sense for them to sign such a certificate to allow BlueCoat to use it with their MitM devices, because something like that is more or less guaranteed to be detected sooner or later, with HPKP and other pinning technologies. They would essentially kill their CA business, and I doubt any amount of money BlueCoat would be willing to pay would cover their entire CA business profits.