New issue
Advanced search Search tips

Issue 713355 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Apr 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android , Windows , Chrome , Mac
Pri: 3
Type: Bug



Sign in to add a comment

Reduce the set of WoSign/StartCom domains in M60

Project Member Reported by rsleevi@chromium.org, Apr 19 2017

Issue description

Continuing the announcement at https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html , reduce the set of WoSign/StartCom domains to the Alexa Top 100,000.
 
Project Member

Comment 1 by bugdroid1@chromium.org, Apr 19 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/fc500b524a601f5b079e8bbcde970b9700201686

commit fc500b524a601f5b079e8bbcde970b9700201686
Author: rsleevi <rsleevi@chromium.org>
Date: Wed Apr 19 21:46:58 2017

Reduce the set of WoSign/StartCom domains to the Alexa Top 100K

As part of phasing out trust in WoSign/StartCom-issued
certificates, reduce the domain whitelist from the top 500K
to the top 100K.

BUG= 713355 

Review-Url: https://codereview.chromium.org/2828083002
Cr-Commit-Position: refs/heads/master@{#465765}

[modify] https://crrev.com/fc500b524a601f5b079e8bbcde970b9700201686/net/data/ssl/wosign/wosign_domains.gperf

Status: Verified (was: Started)

Sign in to add a comment