WoSign vs StartSSL vs Cloudflare; who and why?

Nyr

@FlamesRunner said:
The issue I have with them is that many malicious websites use this certificate to make their users feel 'secure'. For example, while testing a rogue anti-virus, their payment page is using PositiveSSL. Yes, you can do this with any certificate authority, but I find PositiveSSL to be the most common.

As long as it's only download verification I don't see why they should police site contents. They are just a certification authority, if the domain is involved in fraud that's what should (and can) be suspended.

FlamesRunner

Fair enough.