4 ms·

And so, to back to your question: > Imagine what the CA/Browser Forum would do if they discovered that a PKIX CA had lost control of its signing keys, didn't r

And so, to back to your question: > Imagine what the CA/Browser Forum would do if they discovered that a PKIX CA had lost control of its signing keys, didn't revoke them and in fact carried on using them for 2 years without telling anyone... Are these certificates affected? Or perhaps the CA/Browser Forum aren't aware of the scope.

yrro 3y ago
I sure hope not. But I suppose only Microsoft are able to confirm whether their PKIX CA private keys are or are not affected by their various security incidents, including the Azure token leak mentioned by ggeorgovassilis.