Re: Replacing StartCom certificate

Hi Jeff,

According to the bug, the current action affects new certificates
(including EV) only.
https://bugzilla.mozilla.org/show_bug.cgi?id=1311832

imo StartCom/WoSign won't be able to issue legitimate certificates for
a while, but they can backdate just like they did before.

On Thu, Oct 20, 2016 at 9:23 PM, Jeff Breidenbach <[email protected]> wrote:
> Thanks for the heads up. Highly appreciated. I'm impressed that you know the
> certificate
> vendor for The Mail Archive. I was not aware of the drama going on with
> StartCom.
> Is it correct that the removal only applies to new certificates, and
> therefore the
> deadline for action is May 3, 2017 when the current certificate expires? Or
> is it more
> urgent than that? Also, does the trust store removal include extended
> validation
> certificates? This quite a bummer, as it took a whole lot of paperwork to
> get that EV
> certificate which presumably will have to be redone with a new vendor.
>
>
>