This is a ... pretty serious oversight.

But at least it initially appears SSL.com is taking it seriously, we'll have to see what the report says.