According to the timeline, Instagram have known about the ssl keys since 1 Dec.<p>My browser is currently showing an ssl cert for instagram.com that was issued in April and expires on Dec 31.<p>Doesn&#x27;t look like they&#x27;re in any hurry to revoke that one. (I guess like Alex Stamos told his employer - it&#x27;s &quot;trivial and of little value&quot;...)