News for hackers. Stuff that matters.
Re:Final Removal of Trust in WoSign and StartCom Certificates by jbergstroem on Friday July 07, 2017 @12:38PM (#14719776)
Speaking of removing trust bits; the ever-delayed Symantec saga continues with no clear decision.

What concerns me is:

- the lack of public communication, as shown here (tl;dr: private meetings): https://groups.google.com/forum/#!topic/mozilla.dev.security...

- the contrast between symantec and the mozilla security groups path forward [as well as how its communicated] (https://groups.google.com/d/msg/mozilla.dev.security.policy/..., https://www.symantec.com/connect/blogs/symantec-s-response-g...)

Re:Final Removal of Trust in WoSign and StartCom Certificates by ivanr on Friday July 07, 2017 @12:51PM (#14719884)
I don't think you're being fair toward Mozilla. They had a meeting with Symantec and reported on it; there were no details because Symantec is going to soon publish everything. They probably had the meeting only because Gerv was in the area. Mozilla have been transparent the whole time.

Google's approach is clearly different to that of Mozilla, but IIRC they have never pledged transparency. They're a commercial entity and they're doing what they think is right and/or is in their interests.

Re:Final Removal of Trust in WoSign and StartCom Certificates by jbergstroem on Friday July 07, 2017 @12:53PM (#14719908)
I can understand how my comment might have come off as somewhat judgmental (to either side) but that was not my intention. The idea was to [without derailing the thread too much] give people interested in certificate issues a relatively quick summary on what has happened and my concern about it.
Re:Final Removal of Trust in WoSign and StartCom Certificates by yuhong on Friday July 07, 2017 @05:22PM (#14722230)
I wonder if "senior executives" at Google are really involved.
Re:Final Removal of Trust in WoSign and StartCom Certificates by dxf on Friday July 07, 2017 @01:06PM (#14720015)
There is discussion on the Chromium blink-dev list: https://groups.google.com/a/chromium.org/d/topic/blink-dev/e...