Hacker News Reader

You've given a detailed rundown like you've been following, so what is your sense about the resignation? Did the guy resign willingly, or is Digicert the kind of management that likely scapegoated him?

View on HN

He assumed personal responsibility rather than institutional. At the time, everyone in the community expressed alarm that that happened, because 1) and this is obvious, there's no way a single guy would be responsible for the entire fallout and 2) because it sets a bad precedent about what companies can do with their PoC wrt web PKI. It also meant a loss in institutional knowledge about how things worked.

Do you have any resources regarding the resignation I could read?

Here's the long message he left stating in part his resignation. The comments which follow spend quite some time speaking about his resignation: https://bugzilla.mozilla.org/show_bug.cgi?id=1910322#c17

Thanks for pointing it out - I couldn't really follow the full 'drama' between the two threads.

His resignation was merely a tactic to diffuse the situation. He didn’t actually leave—he's still there, active as ever.

> It also meant a loss in institutional knowledge about how things worked.

And the experience earned from the mistake.

He is still here. Far from a scapegoat. Wait and see. He will be back in no time.

Reply on news.ycombinator.com