Re: Microsoft has revoked CAs without releasing note or announcements in ccadb

2023-08-31 Thread Yuwei HAN (hanyuwei70)
They are using special flags [1] to "disable" these certs. And this make them very easy to "revert" these changes. [1] https://learn.microsoft.com/en-us/security/trusted-root/deprecation 在2023年8月31日星期四 UTC+8 00:39:27 写道: Have they revoked those certificates, or have they removed those

Re: Microsoft has revoked CAs without releasing note or announcements in ccadb

2023-08-30 Thread Jeffrey Walton
On Wed, Aug 30, 2023 at 12:39 PM Dan Collins wrote: > > Have they revoked those certificates, or have they removed those certificates > from the Windows trust store? An image in the Ars technical article shows the certificate's property page, and it says, "This certificate has been revoked by

Re: Microsoft has revoked CAs without releasing note or announcements in ccadb

2023-08-30 Thread Dan Collins
Have they revoked those certificates, or have they removed those certificates from the Windows trust store? Also, doesn't that article say that the change was already reversed? On Wed, Aug 30, 2023 at 12:32 PM Yuwei HAN (hanyuwei70) < hanyuwe...@gmail.com> wrote: > On Aug.23 2023, Microsoft

Microsoft has revoked CAs without releasing note or announcements in ccadb

2023-08-30 Thread Yuwei HAN (hanyuwei70)
On Aug.23 2023, Microsoft revoked some CAs causing some software with Code Signing signatures can't run, without any notification. And it has made lots of confusion to system admins. Today Microsoft still not responding in CCADB, so I am here to raise some attention.