Someone asked 2 days ago how customers could be careful about their CA being revoked: https://news.ycombinator.com/item?id=12391308 https://news.ycombinator.co

Someone asked 2 days ago how customers could be careful about their CA being revoked: https://news.ycombinator.com/item?id=12391308 https://news.ycombinator.com/item?id=12391308 > How? I've got no way to judge the security / responsibility of any CA. (...) You can't blame the CA customers for this. To which I answered: > One sign is that if Symantec has issued rogue certificates, and Google publishes the problem, then it's time to leave. I'd say it's valid for StartSSL now as well...