[terom]

The title seems incorrect, per Comment#10 https://bugzilla.mozilla.org/show_bug.cgi?id=1877388#c10 all missued certificates were eventually revoked

> 2024-01-22 > 08:25 The error message “ERROR: basicConstraints MAY appear in the certificate, and when it is included MUST be marked as critical “ in crt.sh was found in our weekly checks

> 2024-02-05 > 13:00 Videoconference with the management of the Trust Center with the decision, to revoke all certificates that have not yet been revoked the next day > 13:25 Information to customers about the final revocation of all certificates the next day

> 2024-06-02 > 15:41 All affected certificates are replaced and revoked.

Given the comment was posted 2024-02-09, the last date is probably a typo of 2024-02-06, aka within 16 days.

[MaKey]

Thanks, you are correct. I missed that part in between the discussion. Unfortunately I can't change the title anymore.

@dang can you change it to "Deutsche Telekom issued invalid certificates, is unwilling to improve processes"?

[dang]

It's probably best to follow the HN guidelines (https://news.ycombinator.com/newsguidelines.html) and use the original title. I've done that now. (The submitted title, for those who like to keep track, was "Deutsche Telekom issued invalid certificates, hasn't revoked them since 6 months".)

It's certainly fine to share what you think is important about an article, but the best way to do that is by adding a comment to the thread.

[MaKey]

I agree wholeheartedly. Thanks a lot!