Web browsers drop mysterious company with ties to U.S. military contractor

Re:Web browsers drop mysterious company with ties to U.S. mi... by charleyablaze on Thursday December 01, 2022 @06:08AM (#33814826)

Followed up yesterday with:

"Certificate Authorities have highly trusted roles in the internet ecosystem and it is unacceptable for a CA to be closely tied, through ownership and operation, to a company engaged in the distribution of malware. Trustcor’s responses via their Vice President of CA operations further substantiates the factual basis for Mozilla’s concerns.

[...]

Our assessment is that the concerns about TrustCor have been substantiated and the risks of TrustCor’s continued membership in Mozilla’s Root Program outweighs the benefits to end users.

In line with our earlier communication, we intend to take the following actions:

    1. Set “Distrust for TLS After Date” and “Distrust for S/MIME After Date” to November 30, 2022, for the 3 TrustCor root certificates (TrustCor RootCert CA-1, TrustCor ECA-1, TrustCor RootCert CA-2) that are currently included in Mozilla’s root store.
    2. Remove those root certificates from Mozilla’s root store after the existing end-entity TLS certificates have expired."

[ Parent | on HN ]

Re:Web browsers drop mysterious company with ties to U.S. mi... by DonHopkins on Thursday December 01, 2022 @09:52AM (#33816956)

>Trustcor’s responses via their Vice President of CA operations further substantiates the factual basis for Mozilla’s concerns.

So Mozilla is flatly stating that Rachel's Gish galloping bullshit responses in the discussion were a significant part of the reason they don't trust her. She should have just followed a good lawyer's advice and kept her mouth shut, because she made her own problems much worse with her own words.

[ Parent | on HN ]