Final Removal of Trust in WoSign and StartCom Certificates

Re:Final Removal of Trust in WoSign and StartCom Certificates by ivanr on Friday July 07, 2017 @12:51PM (#14719884)

I don't think you're being fair toward Mozilla. They had a meeting with Symantec and reported on it; there were no details because Symantec is going to soon publish everything. They probably had the meeting only because Gerv was in the area. Mozilla have been transparent the whole time.

Google's approach is clearly different to that of Mozilla, but IIRC they have never pledged transparency. They're a commercial entity and they're doing what they think is right and/or is in their interests.

[ Parent | on HN ]

Re:Final Removal of Trust in WoSign and StartCom Certificates by jbergstroem on Friday July 07, 2017 @12:53PM (#14719908)

I can understand how my comment might have come off as somewhat judgmental (to either side) but that was not my intention. The idea was to [without derailing the thread too much] give people interested in certificate issues a relatively quick summary on what has happened and my concern about it.

[ Parent | on HN ]

Re:Final Removal of Trust in WoSign and StartCom Certificates by yuhong on Friday July 07, 2017 @05:22PM (#14722230)

I wonder if "senior executives" at Google are really involved.

[ Parent | on HN ]