Hacker News Reader

Ah yes, I missed that note, thanks.

I'll point out notice of appearance doesn't mean they COULD have done anything. The TRO was granted for 7 days already.

From a strategic position, they probably saw they could work with the client and withdraw the TRO faster and cheaper than challenging the TRO in court. Its unlikely a challenge would have significantly decreased the time they were required to not act under the TRO.

View on HN

They could have revoked the certificates of companies not listed in the TRO. Instead revocations for _all_ customers were delayed by 3 days over the time limit [1].

Additionally, it seems more prudent to me that they should drop Allegius as a customer than make the guy resign. The current situation seems like if an issue occurs again then DigiCert will not revoke the certs according to the timeline they committed to (24h).

[1]: https://bugzilla.mozilla.org/show_bug.cgi?id=1910805#c11

Agreed on both counts (I made the same points in other comments :))

Reply on news.ycombinator.com