Re:Final Removal of Trust in WoSign and StartCom Certificates
by justinclift on Sunday July 09, 2017 @02:16PM
(#14730940)
When I looked into this originally, before choosing StartCom, the KSoftware process was really non-optimal.
Just to get a signing certificate I'd need to get my personal id docs signed by a public notary, get those docs to the KSoftware people, and THEN they'd be ok to issue the cert.
Whilst not impossible, that's like the process was back in the Stone Age ;) for getting normal https website certs.
Obviously went with the StartCom approach instead, which may need to be looked at again if we need to sign packages in the near future. :/
Just to get a signing certificate I'd need to get my personal id docs signed by a public notary, get those docs to the KSoftware people, and THEN they'd be ok to issue the cert.
Whilst not impossible, that's like the process was back in the Stone Age ;) for getting normal https website certs.
Obviously went with the StartCom approach instead, which may need to be looked at again if we need to sign packages in the near future. :/