News for hackers. Stuff that matters.

A comment on Please remove StartCom Certification Authority root certificate. Parent comment

Re:Please remove StartCom Certification Authority root certi... by aidenn0 on Wednesday April 09, 2014 @06:09PM (#7562815)
I use a StartCom certificate, but it has never been used with OpenSSL, so I'm fine.

It costs money to maintain a CRL.

Maybe they could revoke their intermediate certificate and reissue certificates to everyone. That would take time to coordinate, and every month that goes by 1/12 of the bad certs expire anyway.

[ Parent | on HN ]
Re:Please remove StartCom Certification Authority root certi... by Karunamon on Wednesday April 09, 2014 @06:28PM (#7562928)
It might, but certainly not $25 per instance. That feels a lot like gouging.
[ Parent | on HN ]