alt Hacker NewsGoogle Public CA is down
Comments
People went ballistic on me a few months ago for bringing this up, but this is exactly the kind of outage that makes me really, really worried about extremely short lived certificates. https://news.ycombinator.com/item?id=46118371
Yeah, if Heroku's cert rotation depends on Google's CA and it tried to renew during the outage window, that'd definitely cause problems. The 8-hour ETA is rough. This is why multi-CA fallback configs exist, but most platforms don't bother until they get burned by something like this. Worth checking if your apps are actually affected or if it's just the dashboard/API having issues.
I worked at RSADSI when I was a kid and supported the custom spin of TIPEM Hayden and Sophia used at Verisign. This brings back some very bad memories.
But... hopefully... people created overlapping windows of cert validity so there's always a valid cert available for their services and can tolerate the CA being out of action for 8(?) hours. Imagine if your TGS/Kerberos or AWS IAM IdP was down for 8 hours.
It is a well-known fact that the moment YouTube goes down, the collective productivity of Earth increases by approximately 4,000%, which is immediately squandered by everyone going to Hacker News to read comments about YouTube being down. I myself have taken to podcasts… an ancient medium in which people simply talk at you for ninety minutes without a single sponsorship for a mobile game, and this is considered a failure
> The fix has been rolled out and the issuance flow has been undrained. We again apologize for the inconvenience.
issuance flow has been undrained?
Ah, so that’s probably why YouTube is also down (at the time of this comment)
youtube (recommendations/homepage) also seems down, I wonder if its relater.
Not sure but it is very strange i was served a strange tom And jerry video https://youtu.be/rilFfbm7j8k
Eight hour estimated restoration time!
> A fix to resolve the issue will roll out in about 8 hours
oof
It's a good thing we have ever-shrinking certificate lifetimes and automation never breaks. That's what I've been told, anyway.
Trust is down ;-)
Hmm why youtube does not work but google.com does.
Now I'm wondering if you rely on OCSP in a TLS client and the pki is Google does it still works?
Welp, looks like they're back up. Home page and notifications are loading just fine now.
Down here in Southeast Asia
The CA outage is hitting a lot of services, but yeah, Heroku's been on a slow decline since the Salesforce acquisition. Free tier killed, pricing creep, stagnant innovation. Even when it's not their fault, you start wondering if it's worth the risk of being on a platform that feels like it's in maintenance mode.
While were all here does anyone want to launch a startup for a cloud security tool I built
Still down
Everyone loves to say they work at $FAMOUS_COMPANY, but when something like this happens, no-one will say that they did this.
Looking forward to the post-mortem.
All is down in eu too
The status history on the page makes it seem like this was intentional?
> 17 Feb 2026 11:32 PST A rollout is going to prevent issuance from occurring. We will provide an estimate on when issuance will stop.
> 17 Feb 2026 12:14 PST Issuance is beginning to stop. A fix to resolve the issue will roll out in about 8 hours