Mozilla 宣布 Firefox 将停止信任 2015 年 4 月 1 日之后由 CNNIC 发布的任何证书。

› Mozilla FTP

This topic created in 4060 days ago, the information mentioned may be changed or developed.

Mozilla公司发布声明，Firefox将停止信任2015年4月1日之后由CNNIC发布的任何证书，Firefox要求CNNIC重新申请它们的授权许可。如果CNNIC满足了Google和Firefox提出的要求，这些限制将会被取消。
来自：@月光博客微博
源网站： https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/

CNNIC

Firefox

微博

4 replies • 2015-04-11 05:44:01 +08:00

i8s301a

Apr 3, 2015

流氓真要耍无赖，可以倒签证书日期吧。。。

i8s301a

Apr 3, 2015

抱歉没仔细读源文章发了楼上的回复，貌似CNNIC被要求提供现有已签发证书的完整列表，觉得这样相对来说是比较稳妥的，就不知道CNNIC是不是肯配合提供列表了，呵呵。

The notBefore date that will be checked is inserted into the certificate by CNNIC. We will therefore be asking CNNIC for a comprehensive list of their currently-valid certificates, and publishing it. After the list has been provided, if a certificate not on the list, with a notBefore date before 1 April 2015, is detected on the public Internet by us or anyone else, we reserve the right to take further action.

Mac

Apr 3, 2015

海运有个术语叫倒签~！

bfti

Apr 11, 2015

倒签是啥意思?