Re:DigiCert: Threat of legal action to stifle Bugzilla disco...
by jchw on Tuesday February 25, 2025 @12:58AM
(#43168672)
Why exactly do you think certificate authorities have a legal right to appear in trust stores?
[ Parent
| on HN ]
Re:DigiCert: Threat of legal action to stifle Bugzilla disco...
by saurik on Tuesday February 25, 2025 @03:41AM
(#43169564)
Is that really the claim, though? If someone chooses to punish DigiCert for compliance with the TRO then DigiCert might have grounds to file for declarative relief from the court, as the court could very well decide to help protect DigiCert from external consequences of their demand.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco...
by nickf on Tuesday February 25, 2025 @04:56AM
(#43170010)
Perhaps, but only in the case that the delayed revocations were scoped to those certificates covered by the TRO, and not over 1000x more from subscribers who had nothing to do with the company who filed the TRO.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco...
by jchw on Tuesday February 25, 2025 @09:15AM
(#43172108)
Well personally, I think that'd be a terrible position for them to take. Honoring the TRO is, as far as I can tell, not the issue that is being raised.
Re:DigiCert: Threat of legal action to stifle Bugzilla disco...
by cortesoft on Tuesday February 25, 2025 @12:00PM
(#43174445)
This case literally involves the courts getting involved in what should appear in trust stores. DigiCert was ordered by the courts to not revoke certificates via a TRO.
If the browsers removed DigiCert, DigiCert could certainly sue based on the harm to their business. They could argue that the browser vendors were inconsistent with the application of their rules. They could argue that the browser vendors were unfairly competing by kicking them out.
Not saying they would win all these, but they would certainly fight it - the alternative would be the end of DigiCert, they aren't going to go down without a fight in whatever venue they can find.