3 ms·
> IMO, if you built a system (and I'm talking about DigiCert here) that expects thousands of customers can update everything at the drop of a hat to update thei
by mynameisvlad 2y ago
> IMO, if you built a system (and I'm talking about DigiCert here) that expects thousands of customers can update everything at the drop of a hat to update their code, you built a bad system.
Per the article, this is required to be a CA. It's not a DigiCert thing, it's a baseline requirement. If you can't revoke your certificates quickly, you risk being delisted by Google/Mozilla/Microsoft et al. Entrust was just recently dropped in part because of this very thing.
- x0x0 2y agoSure, but it's still DigiCert's fault doubly: 1 - they made the screwup; 2 - DigiCert appear not to have put language into their MSAs and so forth that this was a thing that could happen and customers had better be prepared to do it. Why shouldn't Alegeus sue DigiCert to force DigiCert to conform to the terms of the agreement that DigiCert agreed to with Alegeus?