Hi Jeff, According to the bug, the current action affects new certificates (including EV) only. https://bugzilla.mozilla.org/show_bug.cgi?id=1311832
imo StartCom/WoSign won't be able to issue legitimate certificates for a while, but they can backdate just like they did before. On Thu, Oct 20, 2016 at 9:23 PM, Jeff Breidenbach <j...@jab.org> wrote: > Thanks for the heads up. Highly appreciated. I'm impressed that you know the > certificate > vendor for The Mail Archive. I was not aware of the drama going on with > StartCom. > Is it correct that the removal only applies to new certificates, and > therefore the > deadline for action is May 3, 2017 when the current certificate expires? Or > is it more > urgent than that? Also, does the trust store removal include extended > validation > certificates? This quite a bummer, as it took a whole lot of paperwork to > get that EV > certificate which presumably will have to be redone with a new vendor. > > > _______________________________________________ Gossip mailing list https://www.mail-archive.com/gossip@mail-archive.com https://www.mail-archive.com/cgi-bin/mailman/options/gossip
