Hacker News new | past | comments | ask | show | jobs | submit login

It looks like Mozilla and Google have created a set of circumstances where the rational next step would be to wind down WoSign/Startcom and just start a new company.



Which would require creating new roots to be submitted to Mozilla's CA program, and passing the bar for inclusion of a new CA.

That's a multi-year process, unless they can get another CA to cross-sign their root, like LE did. I doubt other CAs will be willing to carry that level of risk given the reputation of WoSign/StartCom.


There should be a 1-year plus ban on principals as well.


Or buy yet another CA and continue under their name?




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: