New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Apple ditches WoSign. Who will follow?
Time to ditch my WoSign cert it seems...
http://www.theregister.co.uk/2016/10/03/apple_wosign_certificates/
Comments
it was probably time to ditch it months ago
Eh its for personal use, not quite what I'd call production
I preferred Mozilla's response of killing any certs younger than a year and allowing the older certs to survive.
Do keep in mind that Apple is doing something similar - they're just only allowing older certs to survive if they were submitted to a CT log. This will likely still catch out a few customers (since WoSign is known not to report everything to CT), but it definitely doesn't mean that all existing certificates will suddenly stop working.