It is two things, well three. High, Jeremy Pickett. And former key custodian at [REDACTED].
- EV certs are a significant source of revenue. The last one I bought was over two grand. For a single cert. And sales reps are invented by revenue.
- Attestation for an EV is done either through Dunn and Bradstreet, or a note from your lawyer. You know, Saul Goodman.
- Liability is then shifted from the issurer to the user. This the hilarity around this case.
There are massive incentives for collusion. When done right, CAs and PKI do really work. But as I tell to at colleagues, it has to be right, or the results are catastrophic.
Like this debacle.
