Hacker News Reader

You where involved in the biggest fuckup by orders of magnitude your whole industry ever did in it's existance? I'm interested to hear the story.

View on HN

StartCom, Symantec, CNNIC, and DigiNotar were bigger. Or do you only count pure incompetence as ‘fuckup’?

They weren't really bigger. Anyone can compromise eMudhra's certs. DigiNotar was hacked by a state-sponsored actor (Iran) and they created a few malicious certs.

The trust was gone and it's good that they closed up shop, don't get me wrong. But it's not like anyone who knows IT could create certificates in their name, in this case the impact is really a lot bigger. Especially to the world as a whole, the DigiNotar issue mainly affected users in Iran.

C'mon now, this isn't even the biggest IT disaster this week.

Im talking about the CA industry. Maybe industry is the wrong word?

Reply on news.ycombinator.com