News for hackers. Stuff that matters.

A comment on StartSSL, please revoke me – My private key has been compromised. Parent comment

Re:StartSSL, please revoke me – My private key has been comp... by pkteison on Saturday April 12, 2014 @05:41AM (#7577422)
They should collect enough up front to make the revocation pre-paid. Refusing to revoke certs results in an unsafe internet and ruins the value of the entire service they are supposed to be providing.
[ Parent | on HN ]
Re:StartSSL, please revoke me – My private key has been comp... by hnha on Saturday April 12, 2014 @05:53AM (#7577436)
They don't refuse, they charge money for this specific service. Protecting your keys is your obligation, not theirs.
[ Parent | on HN ]
Re:StartSSL, please revoke me – My private key has been comp... by claudius on Saturday April 12, 2014 @09:42AM (#7577807)
Ensuring that valid certificates issued by them are only used by legitimate owners of the corresponding domains is their obligation.

Unfortunately, it seems as if Mozilla doesn’t care about the security of their users, otherwise this sorry excuse for a CA would have been dropped from their trust store already.

[ Parent | on HN ]