WebPKI Observatory — Distrust History
Sixteen distrust events across browser root programs reveal that negligent noncompliance (7 events) and compliance operations failures (14 events) drive the majority of trust removal decisions, rather than isolated incidents. Ten distrust events involved a pattern of issues rather than single failures, with a median runway of 1,185 days from final violation to full distrust. Three events were classified as willful circumvention and three as demonstrated incompetence, indicating a spectrum of CA postures toward compliance obligations that extends beyond accidental error.