> but it's hard to see any way that could be productively addressed It sounds to me there are things digicert could have done better, without violating the cou

> but it's hard to see any way that could be productively addressed It sounds to me there are things digicert could have done better, without violating the court order: - they could have revoked all the other certs that weren't protected by the TRO. They did not. - they could have contested the TRO sooner. But they didn't. - Possibly, they could have given customers more warning, since they didn't notify customers until much of the 24 hours was gone That said, IMO I don't what they did is necessarily irredeemable. But they need to come up with, and execute on, a plan to make sure something like this doesn't happen again. And threatening legal action is really not a good way to re-establish trust.