I thought the evidence was pretty clear that Diginotar was pwned by the Iranians. Those certs did end up on the .ir national ISP's firewall doing man-in-the-mi

I thought the evidence was pretty clear that Diginotar was pwned by the Iranians. Those certs did end up on the .ir national ISP's firewall doing man-in-the-middle attacks on Gmail users within Iran.