3 ms·
Why would that matter? They can set up a similar service and use the wosign ca and Mozilla/google wouldn't know anything is amiss
by SallySwanSmith 10y ago
Why would that matter? They can set up a similar service and use the wosign ca and Mozilla/google wouldn't know anything is amiss
- praseodym 10y agoThey are already distrusted: https://news.ycombinator.com/item?id=12787029 https://news.ycombinator.com/item?id=12787029
- steventhedev 10y agoPrevious discussion: https://news.ycombinator.com/item?id=12582534 https://news.ycombinator.com/item?id=12582534 tl;dr - WoSign/StartCom are no longer trusted as a CA (at least by Firefox)
- svenfaw 10y agoHowever, previously issued certs are still trusted. For instance, Firefox doesn't complain about this site's WoSign cert: https://www.checkmyping.com/ https://www.checkmyping.com/
- tscs37 10y agoExisting certs are still trusted. Mozilla stated that they will not distrust certs issued with notBefore till December, so theoretically this cert is good for as long as it's still valid, only after that they need to worry.