Re: Apple's Further Steps for WoSign

2016-12-13 Thread sjw
Hi

Does this also affect the root CA of StartCom Class 4 (EV) and Class 3
(OV) certs?

Regards,
Jonas



Am 30.11.2016 um 21:32 schrieb
certificate-authority-prog...@group.apple.com:
> We are taking further actions to protect users in an upcoming security 
> update.  Apple products will block certificates from WoSign and StartCom root 
> CAs if the "Not Before" date is on or after 1 Dec 2016 00:00:00 GMT/UTC.




signature.asc
Description: OpenPGP digital signature
___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy


Apple's Further Steps for WoSign

2016-11-30 Thread certificate-authority-prog...@group.apple.com


Further Steps for WoSign

After further investigation we have concluded that in addition to multiple 
control failures in the operation of the WoSign certificate authority (CA), 
WoSign did not disclose the acquisition of StartCom.

We are taking further actions to protect users in an upcoming security update.  
Apple products will block certificates from WoSign and StartCom root CAs if the 
"Not Before" date is on or after 1 Dec 2016 00:00:00 GMT/UTC.

Regards,

Apple Root Certificate Program

___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy