2 ms·
This doesn't restore my faith in the CA architecture behind SSL (by this point, I'm not sure anything can), because there isn't a doubt on my mind that it could
by ordinary 15y ago
This doesn't restore my faith in the CA architecture behind SSL (by this point, I'm not sure anything can), because there isn't a doubt on my mind that it could only happen to a small CA like Diginotar. Considering that about 86% of the market is shared between the top 3 CAs and 91% by the top 5[1], that's really not worth that much. On the bright side, at least we now know that the rest, between 14% and 9%, are being held accountable. Baby steps.
_____
[1] https://ssl.netcraft.com/ssl-sample-report/CMatch/certs https://ssl.netcraft.com/ssl-sample-report/CMatch/certs