2 ms·
> The continued existence of compromised certificates from any CA undermines the security of the entire internet because you can no longer trust the browser pad
by Joeboy 13y ago
> The continued existence of compromised certificates from any CA undermines the security of the entire internet because you can no longer trust the browser padlock icon.
True, but my guess is that StartCom doing free revocations / reissues would only make a tiny dent in that situation.
http://news.netcraft.com/archives/2014/04/11/heartbleed-certificate-revocation-tsunami-yet-to-arrive.html http://news.netcraft.com/archives/2014/04/11/heartbleed-cert...
- lisper 13y agoThat may be, but it's beside the point. Given that we have a situation where the continued viability of the internet depends on everyone rowing in the same direction, the argument that Start has no responsibility in this case because "you get what you pay for" should not carry the day.
- tptacek 13y agoThe viability of the Internet in no way depends on Start's actions here. Certificate revocation is not in fact a giant "everyone row the same direction" coordinated effort to save the Internet. It's closer to theater than it is to triage.