3 ms·

Are you saying it was okay to distrust EnTrust but DigiCert is too big to fail?

• terminalbraid 2y ago
  No, and I'm deeply confused how you drew this conclusion from what was written. I specifically say the historical way to deprecate a certificate authority is to prevent them from issuing new certificates. Since certificates have a finite lifetime, the certificate authority would as well and would have immediately no further revenue from certificates. I am saying "pulling the plug" without notice is going to take down tens of thousands of bystanders and anyone using those certificates for business would be unable to conduct business securely online, which would be disastrous. For example amazon.com has a DigiCert-issued certificate.
  • DeepPPP 2y ago
    Agreed. That was my bad.