恭喜Qihoo旗下WoSign和StartCom徹底炸了

yandere

https://groups.google.com/a/chromium.org/forum/#!topic/net-dev/FKXe-76GO8Y
Hello net-dev,


As previously announced, Chrome has been in the process of removing trust from certificates issued by the CA WoSign and its subsidiary StartCom, as a result of several incidents not in keeping with the high standards expected of CAs.

We started the phase out in Chrome 56 by only trusting certificates issued prior to October 21st 2016, and subsequently restricted trust to a set of whitelisted hostnames based on the Alexa Top 1M. We have been reducing the size of the whitelist over the course of several Chrome releases.

Beginning with Chrome 61, the whitelist will be removed, resulting in full distrust of the existing WoSign and StartCom root certificates and all certificates they have issued.

Based on the Chromium Development Calendar, this change should be visible in the Chrome Dev channel in the coming weeks, the Chrome Beta channel around late July 2017, and will be released to Stable around mid September 2017.

Sites still using StartCom or WoSign-issued certificates should consider replacing these certificates as a matter of urgency to minimize disruption for Chrome users.

Cheers,
Devon O'Brien

Chrome61及以後WoSign和StartCom簽發的證書將徹底不被信任
趕緊換 Let's Encrypt 吧.

doruison

xy2938 发表于 2017-7-8 16:39
一看你就是用360的
自嗨

不好意思，我电脑上没有一个360出的软件
倒是我看您在自嗨，嗨您自己神奇的洞察力吧。

可乐呀

不是早就不信任了 吗

yandere

可乐呀 发表于 2017-7-8 15:13
不是早就不信任了 吗

之前是不信任 October 21st 2016 之後簽發的證書。
即將都不信任了，恭喜Qihoo公司

xy2938

静待Apple的反应

用户名

彻底死全家

doruison

360官方还是用的wosign，不错。
不过谷歌的做法没什么用。
360浏览器自己在国内的份额比chrome高N倍。
只要他们自己认就行了

xy2938

doruison 发表于 2017-7-8 16:37
360官方还是用的wosign，不错。
不过谷歌的做法没什么用。
360浏览器自己在国内的份额比chrome高N倍。

一看你就是用360的
自嗨

wangyu1314

360浏览器有什么用？有哪个站长敢不重视chrome 的？