WoSign and StartCom: Mozilla’s proposed conclusion
Is there a governing body or regulatory authority which looks over the process followed by CAs ?<p>As a fan of firefox, I am happy that as a community, Mozilla has done the necessary ground work to reach this conclusion. However, as long as PKI remains a highly profitable business, more and more such events are going to happen.<p>I don't think all CAs should be trusted equally. Right now, AFAIK, my browsing experience is only as secure as the weakest CA. Hopefully, HPKP can put an end to this.