Comment by QuiEgo

10 hours ago

I assume every state level actor is now quietly trying the first few hundred million private keys possible or so just to see what root ca or issuing ca key pairs match.

I assume some state actors have projects for exactly this ever since HTTPS was invented...