If you still trust WoSign's CA, time to nuke it from orbit. Apparently anyone can get a cert for GitHub now.https://twitter.com/pedromelo/status/770151127316885504 …
-
WoSign issued not one, *two* GitHub certs: https://crt.sh/?id=29805567 https://crt.sh/?id=29647048 And they think no need to proactively revoke 0_o.
This is comedy gold. WoSign is spamming Chinese Let's Encrypt users with FUD about "foreign CAs". Oh, the irony.https://groups.google.com/d/msg/mozilla.dev.security.policy/k9PBmyLCi8I/5Lelu0oyDQAJ …
-
-
Meanwhile both WoSign's and StartCom's founders are using legal threats to suppress how WoSign bought StartCom:https://archive.is/QA61W
-
The aforelinked http://mozilla.dev.security .policy thread on this is drama gold. Incidents of negligence by WoSign just keep piling up.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.