Hacker News Reader

Let's be real - there was no way for them to recover their way out of that after this ridiculously bad screw-up.

Sure there was - rebrand and change names, maybe once or twice until the public loses interest to keep talking about it.

Or silently spin out a subsidiary under a new name who takes over the cert business, and redirect existing customers there for renewals.

Also, deflect blame while attacking those who brought up your mistakes.

Don't these people pay any attention to politics?

They also have to convince the root programs to let them stay trusted, which can't be done by issuing vague press releases until the news cycle moves on.

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c30 They're being asked some very pointed questions about why they encountered problems with the key generation process at the time but didn't properly investigate.

Yes they didn't close down the business, it was already gone. There's not a business called "selling certs that aren't accepted by any browser or OS". That's not a product.

Absolutely no way any OS or browser manufacturer forgives them and let's their certs validate anything in the future.

Reply on news.ycombinator.com