Further update on all known suspicious activity from Wosign: https://wiki.mozilla.org/CA:WoSign_Issues
Seriously, what level of malice and/or incompetence does one have to rise to in order to be removed from the Mozilla (and hopefully Microsoft and Chrome) trusted root CA store? Is this not sufficient? On Thu, Sep 1, 2016 at 3:19 AM, Stephane Bortzmeyer <bortzme...@nic.fr> wrote: > On Thu, Sep 01, 2016 at 11:36:57AM +1000, > Matt Palmer <mpal...@hezmatt.org> wrote > a message of 45 lines which said: > > > I'd be surprised if most business continuity people could even name > > their cert provider, > > And they're right because it would be a useless information: without > DANE, *any* CA can issue a certificate for *your* domain, whether you > are a client or not. >
