If you still trust WoSign's CA, time to nuke it from orbit. Apparently anyone can get a cert for GitHub now.https://twitter.com/pedromelo/status/770151127316885504 …
And remember, StartCom cross-signs WoSign, so you need to detrust both. Note that StartCom now uses Chinese infrastructure.
-
-
More details on how WoSign and StartCom are being negligent in their duties as CAs:https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/k9PBmyLCi8I …
-
It's kind of amazing how the WoSign guy's response is basically "oops, sorry, won't happen again". Amazing incident response/disclosure.
- Show replies
New conversation -
-
-
If not StartCom or WoSign, then which free CA for dynamic DNS users affected by Let's Encrypt rate limit?https://community.letsencrypt.org/t/dyndns-no-ip-managed-dns-support/883/11 …
-
Honestly I'd recommend getting your own domain, it's not really expensive or hard...
- Show replies
New conversation -
-
-
@thegrugq StartCom offer free SSL certificate, their marketshare must be pretty frightening :/ -
As far as I'm concerned they've mostly been superseded by
@letsencrypt
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.