NUXI’s Comments

• Apr 9th, 2014 @ 9:41pm

  Re:

  on Shameful Security: StartCom Charges People To Revoke SSL Certs Vulnerable To Heartbleed
  Screw it, I did it myself. I don't want this CA in my browser.
  
  https://bugzilla.mozilla.org/show_bug.cgi?id=994478
• Apr 9th, 2014 @ 9:32pm

  (untitled comment)

  on Shameful Security: StartCom Charges People To Revoke SSL Certs Vulnerable To Heartbleed
  Who wants to file the bug for removal from Mozilla?
  
  http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/maintenan ce/
  
  Section 2, dot 2.
  
  CAs must revoke Certificates that they have issued upon the occurrence of any of the following events:
  
  The CA obtains reasonable evidence that the subscriber�s private key (corresponding to the public key in the certificate) has been compromised or is suspected of compromise (e.g. Debian weak keys), or that the certificate has otherwise been misused;