4 ms·

This is all kinds of crazy at the same time. Why would Trustico want to revoke certificates under the previous root anyway? Why not just start issuing certific

• Someone1234 9y ago
  Both Digicert and Trustico were trying to compete for the former Symantec customers. Both sent customers a replacement key for their soon-to-be broken Symantec keys (with Digicert's needing to be renewed directly with them, and Trustico (via Comodo) with them). This MIGHT have been a misguided attempt by Trustico to sow mistrust between Digicert and Trustico's own customers. If Trustico can convince people that Digicert (who purchased Symantec) wasn't to be trusted and this mass revocation was their fault, then Trustico might get more renews. It also discontinues any relationship Digicert and Trustico's customers have with one another, since they'd all get nice shiny Comodo certs. You can see Trustico's statement here: https://www.trustico.com/news/2018/symantec-revocation/certificate-replacement.php https://www.trustico.com/news/2018/symantec-revocation/certi... Only problem with Trustico's plan is that they shouldn't have even had over 20K's worth of private keys in cold storage. And while it was to their advantage in that they forced Digicert's hand, it also may have irreparably damaged Trustico's reputation.
  • WorldMaker 9y ago
    Certainly seems like Comodo should be seriously reviewing their relationship with Trustico now.