startssl 新服务器是 360 赞助的……

[alect]

canonical name www.startssl.com.

addresses 104.192.110.222

Queried whois.arin.net with "n ! NET-104-192-110-0-1"...

NetRange: 104.192.110.0 - 104.192.110.255
CIDR: 104.192.110.0/24
NetName: CTA-360-104-192-110
NetHandle: NET-104-192-110-0-1
Parent: CHINANET-LAX-IDC-2014 (NET-104-192-108-0-1)
NetType: Reassigned
OriginAS: AS4134
Customer: QIHU 360 INC. (C05456730)
RegDate: 2014-11-14
Updated: 2014-11-14
Comment: abuse report contact [e-mail]
Ref: http://whois.arin.net/rest/net/NET-104-192-110-0-1


CustName: QIHU 360 INC.
Address: 111 West Evelyn Ave.
Address: Suite 206
City: Sunnyvale
StateProv: CA
PostalCode: 94086
Country: US
RegDate: 2014-11-14
Updated: 2014-11-14
Ref: http://whois.arin.net/rest/customer/C05456730

OrgTechHandle: WZZ-ARIN
OrgTechName: zheng, wei zhao
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: http://whois.arin.net/rest/poc/WZZ-ARIN

OrgAbuseHandle: NOC12992-ARIN
OrgAbuseName: NOC
OrgAbusePhone: [phone]
OrgAbuseEmail: [e-mail]
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC12992-ARIN

OrgTechHandle: YANVI-ARIN
OrgTechName: Yan, Vincent
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: http://whois.arin.net/rest/poc/YANVI-ARIN

OrgTechHandle: ZHUJI-ARIN
OrgTechName: zhu, jiang
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: http://whois.arin.net/rest/poc/ZHUJI-ARIN

[abelyao]

我擦… 不去签了……

[wd]

卧槽……

[halczy]

全球都是指向电信北美 104.192.110.222 的 IP
https://www.whatsmydns.net/#A/startssl.com

https://www.startssl.com/AboutUS
"With the rapid growth of global subscribers, StartCom is expanding today with new branch offices in China and the UK starting beginning of 2016. With that StartCom intends to support the rapid development of the China market and further expanding the European market to provide better local pre-sales and after-sales service. "
2016 进军中国市场

[binux]

CHINA TELECOM (AMERICAS) CORPORATION CHINANET-LAX-IDC-2014 (NET-104-192-108-0-1) 104.192.108.0 - 104.192.111.255

[Imivan]

还好已经不用了。

[rainy3636]

抱了一双臭脚

[lshero]

360 给那么多大厂都提交过漏洞 难不成还不用这些大厂的软件了?
http://www.cnbeta.com/articles/461203.htm

[hljjhb]

说不去签的还可以禁用 startssl 根证书

[jasontse]

私钥在自己手里没什么不敢签的，要杜绝你嘚让访客删除 StartSSL 根证书才行。

[xiaozhizhu1997]

本来还想买他们的 EV 的。。
还是默念 GeoTrust 大法好…

[AirSc]

我觉得其实用 360 的服务器也没有什么问题吧。。。

[SonicY]

太敏感了吧 = =
不过话说 letsencrypt 也开始公测了。

[rainy3636]

@hljjhb 感谢提醒

[wdlth]

估计是 WoSign 从中搭线，它卖给红衣 PKI ，交叉证书是 StartSSL 。

[mjever]

刚去签了一张！

[gongjianhui]

刚吊销 WoSign 的证书签了一张 StartSSL 部署在七牛上...

[SharkIng]

看起来是 360 和 Amazon 的服务器了，不过这个... 会有很大影响么？

[wql]

私钥自己手上，他自己还想活就不会去瞎签。
不过 wosign 是卖了一些 PKI 给奇虎。

[jsq2627]

可能只是用了 cdn 吧。。。

[affyun]

@hljjhb #8 有何感想？