For StartCom issues, I think Eddy and Inigo can answer your question that I represent WoSign only.
As I know the new buy website: www.startssl.com is developed by StartCom China R&D team, it posts the order to PKI system that still in Israeli office equipment room. The website is hosed in USA, WoSign website is hosted in China that we designed it since 2011, two separate system. StartCom Hong Kong invested a separate company in China, they have R&D team and customer service team. The validation team is in UK and Israel, and will be in Spain. Best Regards, Richard -----Original Message----- From: Gervase Markham [mailto:[email protected]] Sent: Friday, September 23, 2016 6:04 PM To: Richard Wang <[email protected]>; Peter Bowen <[email protected]>; [email protected] Subject: Re: WoSign and StartCom audit reports On 23/09/16 10:56, Richard Wang wrote: > Yes, 100% independent in 2015. So please don't tie two companies > together for anything happened in 2015, thanks. Oh, I see what you mean. :-) > From Dec. 20th - 22nd 2015, the StartCom new website - > www.startssl.com moved to USA IDC that designed by StartCom Chinese > R&D team. From that time StartCom shared many facilities with WoSign > in Qihoo 360 IDC for security. But still two separate system > including BUY/CMS/PKI, You say the systems are "separate". But are they running the same WoSign-created codebase? Or is StartCom still using the systems it was using before Dec 20th 2015? Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
