I call for a detailed investigation over WoSign's purchase of StartCom and the current status of StartCom. If StartCom is deemed untrusted in connection wi

I call for a detailed investigation over WoSign's purchase of StartCom and the current status of StartCom. If StartCom is deemed untrusted in connection with WoSign, it should be revoked as well. I further call for all current users of WoSign or StartCom to switch to Let's Encrypt as soon as possible. First off, it's impractical for all StartCom/WoSign customers to switch to LE because LE doesn't offer wildcard and EV TLS certificates, neither do they offer certificates that are valid more than 90 days. Second of all, there are 175 root certificates[1] (close to a hundred CAs) trusted by Mozilla, why does this blogger targets the one and only CA in China; go above and beyond digging into private business deals to prove his point and trying so hard to gather up public support to revoke WoSign's root certificates? I mean, sure WoSign was pretty bad in those incidences of certificate mis-issurances and have had some really shitty practices exposed (I suspect incompetence might also contributed), but is WoSign the ONLY one out there who does these shitty practices in the CA business? We don't know, until someone's look into it. But publicly shaming a single CA doesn't make all of us securer, rising awareness and promote security best practices do. PS: if you read the rest of his blog posts in Chinese (resource links ), you would most certainly agree that the blogger is A) knows Chinese really well and B) is a political dissident. So is there any hidden motive of why the blogger did what s/he had done? Personal revenge? You guess is as good as mine. [1] https://wiki.mozilla.org/CA:IncludedCAs https://wiki.mozilla.org/CA:IncludedCAs