5 ms·

> We know there's no TBTF problem with the Web PKI. Hardly. Comodo is still around, and Symantec took years to be gradually distrusted. Hell, even the WoSign/

> We know there's no TBTF problem with the Web PKI. Hardly. Comodo is still around, and Symantec took years to be gradually distrusted. Hell, even the WoSign/StartSSL debacle started in Jan 2015, and they weren't removed before Jan 2017.

jcranmer 9y ago
The WoSign issues became public around early September 2016 (maybe last week of August): https://wiki.mozilla.org/index.php?title=CA:WoSign_Issues&action=history https://wiki.mozilla.org/index.php?title=CA:WoSign_Issues&ac...
- gruez 9y ago
  not to mention that wosign came out in early 2015. https://news.ycombinator.com/item?id=8982013 https://news.ycombinator.com/item?id=8982013
tptacek 9y ago
This is a rebuttal to some argument, but not mine.