Flubbed key signing "ceremony" allowed minting of web credentials for any site.
Comment