Google Chrome 不信任 WoSign and StartCom 证书

[yylzcom]

摘录：“ Beginning with Chrome 56, certificates issued by WoSign and StartCom after October 21, 2016 00:00:00 UTC will not be trusted. Certificates issued before this date may continue to be trusted, for a time, if they comply with the Certificate Transparency in Chrome policy or are issued to a limited set of domains known to be customers of WoSign and StartCom.”

从 Chrome 56 版本起， 2016 年 10 月 21 日之后 WoSign 和 StartCom 颁发的证书将不被信任，之前颁发的证书将会在一段时间内被信任，但是前提是遵守 google 证书透明规定，或是被颁发给已知 WoSign 和 StartCom 的客户。

原文： https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

[kumiko]

等不到 56 了,已经自己手动全拉黑了

[yylzcom]

@kumiko 一样，用的那个 RevokeChinaCerts 脚本

[Khlieb]

@kumiko 不过 LibreOffice 会躺枪（安装包用了 StartCom 证书），应呼吁 LO 也要放弃