“There will be a very, very long tail, IoT devices, Docker containers, forgotten Linux machines, unmaintained CLI tools that shipped their own copy of the roots (which is common in some ecosystems, like Python). Also, Linux distributions are still rolling out updates, some of them are not ready yet, and then system administrators will need to apply them to a lot of machines.”
tl;dr one of the pillars of internet trust got pwn'd by poor administrion.
Ars TechnicaThe Internet goes on high alert after discovery of 8 compromised TLS certsIntermediate certs allow anyone to mint web credentials for any Internet server.