News for hackers. Stuff that matters.

A comment on DigiCert: Threat of legal action to stifle Bugzilla discourse. Parent comment

Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by nickf on Tuesday February 25, 2025 @04:51AM (#43169981)
Nothing public to point to, sorry.

Sub-CAs: Not really. Operational risk to the parent CA is huge, you'd be hard pressed to get any current public CA to sign an issuing CA to be operated externally. Cross-signing still works (though it is the stuff of nightmares in many cases) but again you have to have money and a CA willing to do it!

[ Parent | on HN ]
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by twisteriffic on Thursday February 27, 2025 @07:25PM (#43200228)
Entrust is/was doing it with ssl.com after they were detrusted.
[ Parent | on HN ]
Re:DigiCert: Threat of legal action to stifle Bugzilla disco... by nickf on Friday February 28, 2025 @02:41AM (#43202823)
No, SSLCorp are hosting and managing a CA with Entrust branding. Same as Sectigo are doing. Entrust aren't doing issuance, verification - they're straight reselling from white-labeled issuing CAs.
[ Parent | on HN ]