Re:Final Removal of Trust in WoSign and StartCom Certificates
by snakeanus on Friday July 07, 2017 @03:45PM
(#14721462)
I had hopped that they would do that much earlier. WoSign and StartCom acting in a shady way has been known for quite a long time.
[ Parent
| on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates
by michaelt on Friday July 07, 2017 @04:41PM
(#14721893)
Where can one learn what CAs are acting in a shady way? Are there other CAs on a similar course?
Re:Final Removal of Trust in WoSign and StartCom Certificates
by snakeanus on Friday July 07, 2017 @06:24PM
(#14722671)
I would say that Comodo is quite shady, sadly it seems that cloudflare sites use it so getting rid of it would be quite difficult.
They make multiple low quality and mostly useless applications - one could even call them scamware: https://en.wikipedia.org/wiki/Comodo_Group#Consumer_Security.... They also forked Chromium and Firefox and made their own rebranded browsers which offer nothing of value.
They have multiple clearly fake comments on their certificate pages: https://ssl.comodo.com/comodo-ssl-certificate.php and https://ssl.comodo.com/wildcard-ssl-certificates.php
And finally they tried to trademark the name of LE: https://en.wikipedia.org/wiki/Comodo_Group#Let.27s_Encrypt_t...