Termination of the certificates business of StartCom
groups.google.com
Termination of the certificates business of StartCom
1–10 of 30 posts
Re: Termination of the certificates business of StartCom
#2https://www.startcomca.com/index/News/newDetail?date=2017111...
Press release from their website.
Re: Termination of the certificates business of StartCom
#3https://www.startcomca.com/index/News/newDetail?date=2017111... Press release from their website.
Interestingly it does send a different message than the mailing list post. While not factually wrong, the press release sounds like the browsers are to blame for the decision (which they definitely are not, see the mailing list posting).
Re: Termination of the certificates business of StartCom
#4No doubt victim to the success of LetsEncrypt and good riddance, too. Before LE, Starcom was the only way to get a free and recognized SSL certificate, only it was a pain to use (client certificates) and only worked with specific browsers.
Re: Termination of the certificates business of StartCom
#5https://www.startcomca.com/index/News/newDetail?date=2017111... Press release from their website.
Interestingly it does send a different message than the mailing list post. While not factually wrong, the press release sounds like the browsers are to blame for the decision (which they definitely are not, see the mailing list posting).
If it helps people in other CA businesses to convince management to take compliance and security seriously, all the better.
"No, we can't take a shortcut here. See what happened to StartCom after they bent the rules a bit too much".
Re: Termination of the certificates business of StartCom
#6StartCom will always have a special place in my heart – they're the only company that I had to outright bribe to do business with.
On the other hand… I really won't miss 'em.
Re: Termination of the certificates business of StartCom
#7No doubt victim to the success of LetsEncrypt and good riddance, too. Before LE, Starcom was the only way to get a free and recognized SSL certificate, only it was a pain to use (client certificates) and only worked with specific browsers.
Unfortunately usability was the least of its problems.
Re: Termination of the certificates business of StartCom
#8No doubt victim to the success of LetsEncrypt and good riddance, too. Before LE, Starcom was the only way to get a free and recognized SSL certificate, only it was a pain to use (client certificates) and only worked with specific browsers.
It was much easier to use than LE for me. I've never had a problem with client certificates. It's awesome technology and it's a pity that it's basically unchanged for years, while insignificant things developed. It could completely replace login mechanism everywhere with much more reliable and secure way to handle credentials.
Re: Termination of the certificates business of StartCom
#9https://www.startcomca.com/index/News/newDetail?date=2017111... Press release from their website.
[deleted]
Re: Termination of the certificates business of StartCom
#10No doubt victim to the success of LetsEncrypt and good riddance, too. Before LE, Starcom was the only way to get a free and recognized SSL certificate, only it was a pain to use (client certificates) and only worked with specific browsers.
I think this had less to do with Let's Encrypt, and more to do with the fact that StartCom's root certificates were distrusted by nearly all major browser vendors some time ago due to [their parent company's violations of the Baseline Requirements](https://wiki.mozilla.org/CA:WoSign_Issues).