Putting someone's credentials into question is not necessarily an ad hominem.

But in any case, you seem to have missed this bit: "The protocol they invented is flawed. Here is a nice blog post explaining why."