Hacker News Reader

The situation we found ourselves in is simple: institutions were systematically unable to quickly rotate certificates when they were compromised.

Precisely because of busywork and process fragility that they invented, with a strictly negative benefit for security and end-users.

Can you propose another path to address this issue?

View on HN

It's actually much worse than that. Institutions were rarely able to actually detect said compromise, leaving attackers with certs that were indistinguishable from the real thing and valid for a long period of time. Even when institutions could detect the compromise and could quickly rotate certs, getting users to not still trust the old ones could be a non-trivial challenge.

Reply on news.ycombinator.com