2 ms·
>As well as trusting them I also pay attention to what I see and other people see and press them to do better when they fall short. Can you give an example of
by ori_b 7y ago
>As well as trusting them I also pay attention to what I see and other people see and press them to do better when they fall short.
Can you give an example of how you have personally pressed them and how they responded?
- tialaramex 7y agoSure, after Let's Encrypt posted initially at the end of February about their uh, bug, I responded in part: > That is, how many certificates were really issued to multiple FQDNs (if a single FQDN the bug described has no effect) more than 8 hours after initial correct CAA checks ? Intuitively this should be almost none, but intuitions can be misleading. Jacob responded by saying that they were "working on this analysis today" although in fact the next we heard was a complete list of arguably misissued certificates a few days later in an announcement that was linked from Hacker News and which you've hopefully seen. I wrote (in that Hacker News thread) that this was one way to answer my question :D