WebPKI Observatory — Distrust History
16 distrust events have occurred across all browser programs, with 14 triggered by compliance or operational failures rather than cryptographic compromise. Negligent noncompliance accounts for 7 events, while demonstrated incompetence and willful circumvention each contribute 3, and 10 events involved a pattern of repeated issues rather than a single critical failure. The median runway of 1,185 days from distrust announcement to enforcement reflects browsers' reluctance to disrupt website operators, creating a long window where distrusted CAs remain partially functional.