NUXI’s Comments

• Apr 9th, 2014 @ 9:41pm

  Re:

  on Shameful Security: StartCom Charges People To Revoke SSL Certs Vulnerable To Heartbleed
  Screw it, I did it myself. I don't want this CA in my browser.
  
  https://bugzilla.mozilla.org/show_bug.cgi?id=994478
• Apr 9th, 2014 @ 9:32pm

  (untitled comment)

  on Shameful Security: StartCom Charges People To Revoke SSL Certs Vulnerable To Heartbleed
  Who wants to file the bug for removal from Mozilla?
  
  http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/maintenan ce/
  
  Section 2, dot 2.
  
  CAs must revoke Certificates that they have issued upon the occurrence of any of the following events:
  
  The CA obtains reasonable evidence that the subscriber’s private key (corresponding to the public key in the certificate) has been compromised or is suspected of compromise (e.g. Debian weak keys), or that the certificate has otherwise been misused;