Re: [Gossip] Replacing StartCom certificate

2017-04-24 Thread Jeff Breidenbach
The Mail Archive has switched certificate authorities, and dropped extended validation. Please let me know if you notice any problems. ___ Gossip mailing list https://www.mail-archive.com/gossip@mail-archive.com https://www.mail-archive.com/cgi-bin/mailma

Re: [Gossip] Replacing StartCom certificate

2016-10-21 Thread Ralph Corderoy
Hi Jeff, > This quite a bummer, as it took a whole lot of paperwork to get that > EV certificate which presumably will have to be redone with a new > vendor. Why bother with an EV? Google don't, nor Facebook IIRC. Go LetsEncrypt? -- Cheers, Ralph. https://plus.google.com/+RalphCorderoy _

Re: [Gossip] Replacing StartCom certificate

2016-10-20 Thread Olly Betts
On Thu, Oct 20, 2016 at 10:44:47PM -0500, Yang Yu wrote: > According to the bug, the current action affects new certificates > (including EV) only. > https://bugzilla.mozilla.org/show_bug.cgi?id=1311832 > > imo StartCom/WoSign won't be able to issue legitimate certificates for > a while, but they

Re: [Gossip] Replacing StartCom certificate

2016-10-20 Thread Yang Yu
Hi Jeff, According to the bug, the current action affects new certificates (including EV) only. https://bugzilla.mozilla.org/show_bug.cgi?id=1311832 imo StartCom/WoSign won't be able to issue legitimate certificates for a while, but they can backdate just like they did before. On Thu, Oct 20, 20

Re: [Gossip] Replacing StartCom certificate

2016-10-20 Thread Jeff Breidenbach
Thanks for the heads up. Highly appreciated. I'm impressed that you know the certificate vendor for The Mail Archive. I was not aware of the drama going on with StartCom. Is it correct that the removal only applies to new certificates, and therefore the deadline for action is May 3, 2017 when the c