分类
业界资讯

谷歌浏览器 将彻底取消CA机构 沃通(WoSign)的信任

Final removal of trust in WoSign and StartCom Certificates

Hello net-dev,

As previously announced, Chrome has been in the process of removing trust from certificates issued by the CA WoSign and its subsidiary StartCom, as a result of several incidents not in keeping with the high standards expected of CAs.

 

We started the phase out in Chrome 56 by only trusting certificates issued prior to October 21st 2016, and subsequently restricted trust to a set of whitelisted hostnames based on the Alexa Top 1M. We have been reducing the size of the whitelist over the course of several Chrome releases.

 

Beginning with Chrome 61, the whitelist will be removed, resulting in full distrust of the existing WoSign and StartCom root certificates and all certificates they have issued.

 

Based on the Chromium Development Calendar, this change should be visible in the Chrome Dev channel in the coming weeks, the Chrome Beta channel around late July 2017, and will be released to Stable around mid September 2017.

 

Sites still using StartCom or WoSign-issued certificates should consider replacing these certificates as a matter of urgency to minimize disruption for Chrome users.

Cheers,
Devon O’Brien

由棋仙

人生就是一场旅行,不必在乎目的地,在乎的,只是沿途的风景,和看风景的心情.

发表评论

电子邮件地址不会被公开。 必填项已用*标注