The decline of WoSign and StartCom has been one of the bigger stories in the SSL industry over the past year or so, and his January will likely mark the final chapter. In a blog post written on August 30th<\/sup> on its Security Blog<\/a>, Mozilla Program Manager Kathleen Wilson confirms the final phase of the plan: completely removing WoSign and StartCom\u2019s root certificates from Mozilla\u2019s root store in Firefox 58.<\/span><\/p>\n Mozilla, which is following the same action being taken by the other major browsers, announced its intention to remove the roots back in October of 2016<\/a>, when it also announced that it would stop validating new certificates chaining to said root certificates. That change was made in Firefox 51.<\/p>\n As of January 2018, when Firefox 58 is released, Mozilla will have removed the roots from its trust store. Per Wilson:<\/p>\n “Websites using certificates chaining up to any of the following root certificates need to migrate to another root certificate.”<\/p><\/blockquote>\n Mozilla will be removing the following root certificates in January 2018:<\/p>\n If you\u2019re looking for the complete run-down of the WoSign\/StartCom fiasco, Vince covered it pretty extensively:<\/p>\n If you’re looking for the short version, it’s this: WoSign and StartCom, which are basically the same company, got caught mis-issuing SSL certificates in order to circumvent CAB Forum standards. The CAB Forum is the congress of Web Browsers and Certificate Authorities that acts as the de facto regulatory body for the SSL industry.<\/p>\n After a series of meetings, WoSign’s CEO resigned and the browsers outlined a plan in which both CAs would be gradually distrusted until their roots would be removed from trust stores.<\/p>\n As Mozilla announced yesterday, the final deadline is in January.<\/p>\n","protected":false},"excerpt":{"rendered":" What started in Firefox 51 ends in 58 as Mozilla removes a pair of disabled roots The decline of WoSign and StartCom has been one of the bigger stories in…<\/p>\n","protected":false},"author":6,"featured_media":4737,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[17],"tags":[151,192,233,186],"class_list":["post-4729","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-lowdown","tag-firefox","tag-mozilla","tag-startcom","tag-wosign","post-with-tags"],"views":9177,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2017\/08\/iStock-693492746.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/4729","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=4729"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/4729\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/4737"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=4729"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=4729"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=4729"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Why All the Distrust?<\/h2>\n
\n