This is what I hoped would happen when we learned about the malicious intermediate: https://news.ycombinator.com/item?id=9254899 https://news.ycombinator.com/it

This is what I hoped would happen when we learned about the malicious intermediate: https://news.ycombinator.com/item?id=9254899 https://news.ycombinator.com/item?id=9254899 We need to send CAs a strong signal that the trust (and license to print money that comes along with it) we put into then hinges on them behaving properly. Making sure that their intermediaries do the same is obviously part of the deal. We must make it very clear to CAs that hiding behind intermediaries is not an acceptable strategy to escape their responsibilities.