Hi Xiaosheng. On 09/10/16 14:54, 谭晓生 wrote: > There are 5 components of StartCom’s business supporting software:
It might be useful if you were to explain what function in the certificate issuance process is performed by each of these five components. > 3. PKI – signing service > Code: Same code with WoSign’s one. > Server: Shared Server. > Location: The primary one is hosted in Qihoo 360 head quarter’s data > center in Beijing since Dec 2015, there is a backup server in Wosign’s office > in Shenzhen. > Business Process: Same Presumably the fact that this code is shared with WoSign explains why the StartCom serial numbers changed to be "WoSign-style" in December 2015. > 5. TSA > Code: Same code with Wosign’s one. > Server: Dedicate server, no sharing. > Location: StartCom TSA: http://tsa.startssl.com is located in Qihoo 360 > Los Angeles IDC, WoSign TSA: http://timestamp.wosign.com is hosted in Qihoo > 360 China IDC. > Business Process: Same Is this server involved in SSL certificate issuance at all? Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
