4 ms·

Just curious what you think the consequences could be? Worst case scenario people would need to find a new CA the next time they need a certificate, right?

• acdha 4y ago
  I think the worst-case would be a mistake/malice issuing revocations for all of those certificates — that'd take out a ton of different sites and there'd be plenty of chaos around cleaning that up. For example, I note that stackoverflow.com, httpd.apache.org, and nginx.org all use LE certificates which would mean a fair number of people would struggle to install a replacement.
  • Dylan16807 4y ago
    In practice I think that gets a few through, then the mozilla and google servers that push revocation lists start to overload and the admins notice what's going on and shut things down.
    • acdha 4y ago
      Oh, sure but if we’re talking worst-case we’ll assume that the server infrastructure is bulletproof and the admins are all distracted by (maybe Musk just tweeted again).
      • Dylan16807 4y ago
        If we're assuming worst case about multiple separate companies then we might as well posit the power grid goes down.