Further Steps for WoSign

After further investigation we have concluded that in addition to multiple 
control failures in the operation of the WoSign certificate authority (CA), 
WoSign did not disclose the acquisition of StartCom.

We are taking further actions to protect users in an upcoming security update.  
Apple products will block certificates from WoSign and StartCom root CAs if the 
"Not Before" date is on or after 1 Dec 2016 00:00:00 GMT/UTC.

Regards,

Apple Root Certificate Program

_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to