Hacker News new | past | comments | ask | show | jobs | submit
How should Sectigo have detected the badness?
Verifying the documentation of the key ceremony, what scripts they used, the attestation from the HSM…