Re: [Gossip] Replacing StartCom certificate

2016-10-21 Thread Ralph Corderoy
Hi Jeff, > This quite a bummer, as it took a whole lot of paperwork to get that > EV certificate which presumably will have to be redone with a new > vendor. Why bother with an EV? Google don't, nor Facebook IIRC. Go LetsEncrypt? -- Cheers, Ralph. https://plus.google.com/+RalphCorderoy

Re: [Gossip] Replacing StartCom certificate

2016-10-20 Thread Olly Betts
On Thu, Oct 20, 2016 at 10:44:47PM -0500, Yang Yu wrote: > According to the bug, the current action affects new certificates > (including EV) only. > https://bugzilla.mozilla.org/show_bug.cgi?id=1311832 > > imo StartCom/WoSign won't be able to issue legitimate certificates for > a while, but they

Re: [Gossip] Replacing StartCom certificate

2016-10-20 Thread Yang Yu
Hi Jeff, According to the bug, the current action affects new certificates (including EV) only. https://bugzilla.mozilla.org/show_bug.cgi?id=1311832 imo StartCom/WoSign won't be able to issue legitimate certificates for a while, but they can backdate just like they did before. On Thu, Oct 20,

Re: [Gossip] Replacing StartCom certificate

2016-10-20 Thread Jeff Breidenbach
Thanks for the heads up. Highly appreciated. I'm impressed that you know the certificate vendor for The Mail Archive. I was not aware of the drama going on with StartCom. Is it correct that the removal only applies to new certificates, and therefore the deadline for action is May 3, 2017 when the

[Gossip] Replacing StartCom certificate

2016-10-18 Thread Yang Yu
Any plan to replace the StartCom certificate? StartCom is getting removed from Mozilla and Apple trust store. Let's encrypt may be a good alternative. Thanks. Yang ___ Gossip mailing list https://www.mail-archive.com/gossip@mail-archive.com