1. maxburn's Avatar
    Both Apple and Mozilla have started the process of moving away from trusting WoSign/Startcom security certificates. There is quite a case built against trusting them here: https://wiki.mozilla.org/CA:WoSign_Issues

    Please get Android Central (and the mobile apps) off of Startcom security certificates. I have distrusted them on my phone, which of course broke the app and I won't be turning that back on. I had to turn it back on in my computer to post this, but I won't be around much after this I guess.

    P.S. As I type this I'm on a plain text non encrypted web page? What's up with that?
    10-05-2016 06:26 AM
  2. James Falconer's Avatar
    Thanks for reporting. Sending this to our tech team now.
    10-05-2016 09:48 AM
  3. Marcus Adolfsson's Avatar
    Thanks, we will keep an eye on the StartCom issue. We started using them recently for our EV certs.

    We don't officially support HTTPS yet on our sites, so that is why you are seeing redirects between secure and non-secure pages. We plan on being fully HTTPS and HTTP/2 compliant later this month.
    10-05-2016 10:04 AM
  4. Aquila's Avatar
    @marcus that's awesome, thanks for the update!
    10-05-2016 10:55 AM
  5. maxburn's Avatar
    Plans are moving ahead to drop trust from wosign / startcom. Of all the places I visit android central seems to be the only one that doesn't work when I drop those certificates.

    https://groups.google.com/forum/?nom...cy/BV5XyFJLnQM

    https://threatpost.com/apple-to-bloc...icates/121044/
    10-13-2016 06:15 PM
  6. Marcus Adolfsson's Avatar
    We will have new certs installed by end of next week.

    Thanks!
    Aquila, James Falconer and pkcable like this.
    10-14-2016 10:56 AM
  7. Marcus Adolfsson's Avatar
    New SSL Certs have been uploaded.
    Aquila and pkcable like this.
    10-18-2016 11:05 PM
  8. maxburn's Avatar
    Very nice, thanks.
    pkcable likes this.
    10-19-2016 05:24 AM
  9. James Falconer's Avatar
    Excellent.

    @maxburn - thanks for the heads up.

    @Marcus - thanks for the update!
    10-21-2016 10:50 AM

Similar Threads

  1. Replies: 2
    Last Post: 10-05-2016, 05:17 PM
  2. Replies: 1
    Last Post: 10-05-2016, 07:34 AM
  3. Adb command to set or change the voicemail number
    By AC Question in forum Ask a Question
    Replies: 1
    Last Post: 10-05-2016, 07:31 AM
  4. Is there is any way to recover data after hard reset?
    By AC Question in forum Ask a Question
    Replies: 0
    Last Post: 10-05-2016, 06:05 AM
LINK TO POST COPIED TO CLIPBOARD