3 ms·
True. We really need a plan B, to plan what to do in such a scenario, but there doesn't seem to be enough of an incentive to improve the system yet.
by Skalman 15y ago
True. We really need a plan B, to plan what to do in such a scenario, but there doesn't seem to be enough of an incentive to improve the system yet.
- marshray 15y agoAmazon gets a new cert with a different provider and revokes the old one. Those people are pretty talented operationally. This should not be a difficult thing to do.
- mseebach 15y agoGiven the catastrophic nature of being without a cert and the relative low cost of those, it's not hard to believe that they maintain a backup certificate, ready to switch in at a moments notice.
- marshray 15y agoProbably lots of sites will after this week. IMHO it's getting a little out of hand how much concern is being given to the gov.nl private PKI system and the few hundred other certs Diginotar issued where the website admins have to swap a file or two. The big deal is the security of the whole freaking internet resting on top of this tiny little web app and server in .nl and the unknown number of actual users in .ir getting MitMd and likely horribly persecuted.