La suite de http://shaarli.guiguishow.info/?NFwYUA .

Mozilla has discovered that a Certificate Authority (CA) called WoSign has had a number of technical and management failures. Most seriously, we discovered they were backdating SSL certificates in order to get around the deadline that CAs stop issuing SHA-1 SSL certificates by January 1, 2016. Additionally, Mozilla discovered that WoSign had acquired full ownership of another CA called StartCom and failed to disclose this, as required by Mozilla policy. The representatives of WoSign and StartCom denied and continued to deny both of these allegations until sufficient data was collected to demonstrate that both allegations were correct. The levels of deception demonstrated by representatives of the combined company have led to Mozilla’s decision to distrust future certificates chaining up to the currently-included WoSign and StartCom root certificates.

Distrust certificates with a notBefore date after October 21, 2016 which chain up to the following affected roots. If additional back-dating is discovered (by any means) to circumvent this control, then Mozilla will immediately and permanently revoke trust in the affected roots.

This change will go into the Firefox 51 release train.

Add the previously identified backdated SHA-1 certificates chaining up to these affected roots to OneCRL.

Remove these affected root certificates from Mozilla’s root store at some point in the future. If the CA’s new root certificates are accepted for inclusion, then Mozilla may coordinate the removal date with the CA’s plans to migrate their customers to the new root certificates. Otherwise, Mozilla may choose to remove them at any point after March 2017.

Via #grifon.

ÉDIT DU 27/10/2016 À 20H50 : Avec StartCom, on avait déjà eu le droit à ça : https://www.computest.nl/blog/startencrypt-considered-harmful-today/ pour montrer le non sérieux de l'AC :) Et après, c'est CaCert qui est refusé par la communauté des navigateurs web car y'aurait des failles dans leur code et leur process humain. L-O-L deux poids, deux mesures. FIN DE L'ÉDIT.