News for hackers. Stuff that matters.

A comment on DigiCert: Threat of legal action to stifle Bugzilla discourse. Parent comment

Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by userbinator on Tuesday February 25, 2025 @01:59AM (#43169031)
The normal people, who account for 99% of the end users of DigiCert's customers, are not going to disable updates on their web browser or their OS to "take a stand" against this decision.

...unless they notice the breakage, and you tell them to do so to stop it.

[ Parent | on HN ]
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by jchw on Tuesday February 25, 2025 @07:39AM (#43171111)
Ignoring the policy reasons that this won't happen, not all devices can be downgraded, so by then it's too late anyway. Best you can do is bypass a non-HSTS certificate warning.

That all assumes DigiCert continues issuing certificates they know won't be trusted. I assume most likely what will actually happen is they have to start selling certificates from another CA, but failing that they're probably just going to stop issuing certificates before the cutoff.

[ Parent | on HN ]