4 ms·
I just went to delete these roots from my Windows system but it's not listed. It was in Firefox's list but not in Window's. Anyone know why?
by guelo 10y ago
I just went to delete these roots from my Windows system but it's not listed. It was in Firefox's list but not in Window's. Anyone know why?
- hannob 10y agoThey're cross-signed by startcom.
- guelo 10y agoI'm not familiar with this. Does it mean that if you trust StartCom you have to trust WoSign?
- detaro 10y agoNo, you can explicitly install the WoSign certificate into the "Untrusted Certificates" chain.
- Karunamon 10y agoGiven StartCom's bad behavior, you're probably better off marking them untrusted too.
- svenfaw 10y agoWindows actually trusts 5 WoSign roots by default, regardless of the StartCom cross-signing. Friendly names: WoSign - WoSign 1999 - WoSign ECC - WoSign G2 - WoSign China
- kobayashi 10y agoAnybody know how to delete certs from Firefox on OS X?
- guelo 10y agoSettings -> Advanced -> Certificates -> View Certificates -> Authorities
- besselheim 10y agoThe root certificates trusted by Windows are fetched from Microsoft's servers as needed. You can download all of them using the command: certutil -generateSSTFromWU roots.sst Then if you open up roots.sst (it opens in certmgr.msc) and sort by Friendly Name, you should see the WoSign roots. You can then export these and import them into the Untrusted Certificates store if you wish to block WoSign as a trusted root.