StartCom Certificate

Printable View

04-03-17, 04:03
Androth

StartCom Certificate

Perhaps it's escaped everyone's notice, but StartCom is basically banned by most reasonable things at this point, so this sites certificate (and likely any other SSL transaction) no longer shows up as valid. Perhaps a switch to one of the other many free providers, perhaps letsencrypt or something. Just an idea.
04-03-17, 11:42
Zoltan

Quote:

Originally Posted by Androth

Perhaps it's escaped everyone's notice, but StartCom is basically banned by most reasonable things at this point, so this sites certificate (and likely any other SSL transaction) no longer shows up as valid. Perhaps a switch to one of the other many free providers, perhaps letsencrypt or something. Just an idea.

Thank you for the report. As far I can see and read that only certificates generated after 21. Oct. 2016 are affected by this ban.

Short side note: We do have a Class-2 certificates - a Class-1 is insufficient.
04-03-17, 19:30
Androth

1 Attachment(s)

Quote:

Originally Posted by Zoltan

Thank you for the report. As far I can see and read that only certificates generated after 21. Oct. 2016 are affected by this ban.

Short side note: We do have a Class-2 certificates - a Class-1 is insufficient.

Attachment 12729

This is from google chrome. I see it's a class 2, I am browsing from a Mac, I do believe Apple dropped all the certs that come from that authority entirely, so it's possible that's where the issue lies. This link https://support.apple.com/en-us/HT204132 Sort of explains that, it does mention iOS, but it applies to MacOS as well according to articles.

Additionally https://security.googleblog.com/2016...-startcom.html Put's no limit on when the certs are issue, and simple slowly pulls anything cross signed by either wosign or startcom. I agree a class 1 is not sufficient, but I think it would be a good idea to get an authority far from the wosign people.