News for hackers. Stuff that matters.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by cortesoft on Tuesday February 25, 2025 @12:49AM (#43168619)
> mainly Google, Microsoft and Mozilla

They don't have free rein to do whatever they want. If they chose to remove them, they are going to have to be ready to defend themselves in court.

Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by jchw on Tuesday February 25, 2025 @12:58AM (#43168672)
Why exactly do you think certificate authorities have a legal right to appear in trust stores?
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by saurik on Tuesday February 25, 2025 @03:41AM (#43169564)
Is that really the claim, though? If someone chooses to punish DigiCert for compliance with the TRO then DigiCert might have grounds to file for declarative relief from the court, as the court could very well decide to help protect DigiCert from external consequences of their demand.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by nickf on Tuesday February 25, 2025 @04:56AM (#43170010)
Perhaps, but only in the case that the delayed revocations were scoped to those certificates covered by the TRO, and not over 1000x more from subscribers who had nothing to do with the company who filed the TRO.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by jchw on Tuesday February 25, 2025 @09:15AM (#43172108)
Well personally, I think that'd be a terrible position for them to take. Honoring the TRO is, as far as I can tell, not the issue that is being raised.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by cortesoft on Tuesday February 25, 2025 @12:00PM (#43174445)
This case literally involves the courts getting involved in what should appear in trust stores. DigiCert was ordered by the courts to not revoke certificates via a TRO.

If the browsers removed DigiCert, DigiCert could certainly sue based on the harm to their business. They could argue that the browser vendors were inconsistent with the application of their rules. They could argue that the browser vendors were unfairly competing by kicking them out.

Not saying they would win all these, but they would certainly fight it - the alternative would be the end of DigiCert, they aren't going to go down without a fight in whatever venue they can find.

Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by SkiFire13 on Tuesday February 25, 2025 @04:46PM (#43177925)
> DigiCert was ordered by the courts to not revoke certificates via a TRO.

... and DigiCert did not try to appeal the TRO.

Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by justinclift on Tuesday February 25, 2025 @01:32AM (#43168858)
Both Google and Microsoft tend to act like they have enough money and lawyers to defend whatever behaviour they feel like engaging in.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by cjbprime on Tuesday February 25, 2025 @01:12AM (#43168752)
Those companies are always ready to defend themselves in court, and this is a country with extremely strong free speech rights.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by chgs on Tuesday February 25, 2025 @02:35AM (#43169219)
What country?