Hacker News Reader

Comment by 0x0 | Hacker News Reader

How does their SSL warranty play into this? Will they have to pay $1.250.000 for each OrganizationSSL certificate? https://www.globalsign.com/repository/globalsign-warranty-po...

View on HN

Interesting - 3.3 seems to be applicable here:

"3.3 Intentional or accidental errors This Warranty Policy warrants against intentional or accidental errors introduced into a Certificate by any personnel of a GlobalSign RA or a GlobalSign LRA due to failure to use reasonable care as required under the CPS."

Not a lawyer, but will push this with our legal team for sure.

This could destroy GlobalSign, so there must be a clause to exempt them from liability ... ah, here it is:

"8.1 Total amount for warranty exhausted When the maximum limit allocated for warranty payments is exhausted, GlobalSign shall have no further obligation to refund any Beneficiary, unless required otherwise by applicable law."

"introduced into a Certificate"

They didn't introduce any errors _into_ a certificate. They affected the certificate chain, but not the certificate directly. I'm certain this is how their own lawyers view this.

This is going to get hilariously legal. A certificate from GlobalSign or anybody else is the product of the chain, if the chain isn't there and the cert isn't valid it's no more valid than a self-signed one.

Tell me again, anybody, why we trust these people?

If THIS isn't covered by warranty, what would it take to invoke this warranty?

Btw I've always thought these SSL insurance warranties sounded like a scam.

It seems likely we'll find out if they are, at least for GlobalSign's.

So basically if you ask them for $1.250.000 in potential lost sales and damage to your reputation because your website is unavailable and appears to be compromised, you'll get it? Nice.

Not if they allocated $0 for warranty payments :-)

Unless required otherwise by applicable law. :-)

"When the maximum limit allocated for warranty payments is exhausted..."

I'm gonna go out on a limb and guess they allocated $0.

Reply on news.ycombinator.com