News for hackers. Stuff that matters.
Re:Final Removal of Trust in WoSign and StartCom Certificates by yuhong on Friday July 07, 2017 @02:03PM (#14720567)
Thinking about it, we are lucky Debian moved to Gandi instead of StartCom when they ditched the SPI CA.
Re:Final Removal of Trust in WoSign and StartCom Certificates by lwf on Friday July 07, 2017 @09:55PM (#14723618)
Gandi's been a long-time supporter of Debian[1], providing preferred pricing (their best "bulk rates") for years. I assume the CA migration was also donated.

I'm personally quite glad the SPI CA is gone, and that we removed CACert[2][3]; stopped a lot of "works on my machine" confusion, and made the project more welcoming to people not already running a Debian derivative.

[1]: https://www.gandi.net/supports/debian/ [2]: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718434 [3]: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+b...