3 ms·
They were removed for being compromised and went bankrupt before trying again. I don't see how that invalidates what I said. Meanwhile, CAs that have issued CA
by revelation 13y ago
They were removed for being compromised and went bankrupt before trying again. I don't see how that invalidates what I said.
Meanwhile, CAs that have issued CA=yes certs remain, but you know, Mozilla wrote them a letter reminding them on security best practices.
- klapinat0r 13y agoTrue that they went bankrupt, but they filed on Sep 20th 2011, and the Mozilla decision to permanently remove them was a week prior or at least on Sep 2nd 2011; thus "unless you were compromised, at which point they'll happily add your new CA" is not correct. EDIT: To clearify, this is the phrase that we seem to be arguing about: Complete revocation of trust is a decision we treat with careful consideration, and employ as a last resort. (from the Mozilla Security Blog link above). They were effectively out in the cold, not "in once you're in" after the incident.