News for hackers. Stuff that matters.

A comment on Distrusting New WoSign and StartCom Certificates. Parent comment

Re:Distrusting New WoSign and StartCom Certificates by jcranmer on Tuesday October 25, 2016 @10:07AM (#12788087)
The backdated certificates that have already been found are explicitly being added to OneCRL, which is to say that they are explicitly distrusted independent of what the CRL/OSCP responder of WoSign and StartCom say.
[ Parent | on HN ]
Re:Distrusting New WoSign and StartCom Certificates by bandrami on Tuesday October 25, 2016 @10:17AM (#12788164)
So some portion of Firefox users will be protected from them. Better than nothing I guess.
[ Parent | on HN ]