News for hackers. Stuff that matters.
Re:WoSign Incidents Report Update [pdf] by nikic on Saturday October 08, 2016 @07:48AM (#12666600)
> The charged 42 backdated certificates are an intentional activity that we try to help the desperate customers since there are more than 3M users still using Windows XP sp2 in China. We like to make things simple that don’t realize how serious this solution was.

I think this is all there really is to it. Some customers wanted to have backdated SHA1 certificates so they could continue supporting platforms that do not accept SHA256 certificates. WoSign decided to oblige them.

There are no comments on this comment yet.