Re:Let's Encrypt Has Issued a Billion Certificates
by Thorrez on Thursday February 27, 2020 @11:36PM
(#22440544)
>promptly
It takes a very long time to revoke trust if you don't want to break the web. Symantec was discovered to have misissued a bunch of certs in 2015[1] (including for google.com). No one removed trust for them. Then in Jan 2017 it was discovered they misissued a bunch more[2]. I believe it was the end of 2018 before browsers finally removed trust for them.
It takes a very long time to revoke trust if you don't want to break the web. Symantec was discovered to have misissued a bunch of certs in 2015[1] (including for google.com). No one removed trust for them. Then in Jan 2017 it was discovered they misissued a bunch more[2]. I believe it was the end of 2018 before browsers finally removed trust for them.
[1] https://security.googleblog.com/2015/10/sustaining-digital-c...
[2] https://security.googleblog.com/2017/09/chromes-plan-to-dist...