My mistake. I'd been under the impression that the discussion of removing Diginotar from the trust list had fizzled, like Trustwave's did [1,2]. It's good to le

My mistake. I'd been under the impression that the discussion of removing Diginotar from the trust list had fizzled, like Trustwave's did [1,2]. It's good to learn that I was wrong. There are counterexamples, though. Comodo[3] and Verisign[4] are still in the trust store— they're too big to fail, I expect. [1] http://www.computerworld.com/s/article/9224082/Trustwave_admits_issuing_man_in_the_middle_digital_certificate_Mozilla_debates_punishment http://www.computerworld.com/s/article/9224082/Trustwave_adm... [2] https://bugzilla.mozilla.org/show_bug.cgi?id=724929 https://bugzilla.mozilla.org/show_bug.cgi?id=724929 [3] http://www.wired.com/2011/03/comodo-compromise/ http://www.wired.com/2011/03/comodo-compromise/ [4] https://www.schneier.com/blog/archives/2012/02/verisign_hacked.html https://www.schneier.com/blog/archives/2012/02/verisign_hack...