Changes

Jump to: navigation, search

CA/WoSign Issues

475 bytes added, 09:52, 9 September 2016
Expand incident R
==Issue R: Purchase of StartCom (Nov 2015)==
WoSign purchased the CA "StartCom" and did not disclose the transaction as a change of ownership, which may violate we believe violates section 5 of the [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/maintenance/ Mozilla CA Certificate Maintenance Policy]. More Furthermore, when this clause was brought to their attention, they denied that any changes fell under it, and they attempted to suppress further information about the ownership transfer when it was brought to the community's attention. Full details to can be providedfound in [https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/0pqpLJ_lCJQ the post in mozilla.dev.security.policy]. ===WoSign Response=== We have not yet had an official response from WoSign or StartCom about this issue.
==Issue S: Backdated SHA-1 Certs (January 2016)==
Accountapprovers, antispam, confirm, emeritus
4,925
edits

Navigation menu