In fact, can you tell us, when was the first time WoSign started to notify users about replacing certs?
I've dig through all of WoSign's announcement and the first and in fact the ONLY announcement regarding replacing certs is dated July 10th, 2017 , titled Announcement regarding Google's decision on July 7th". During Sept 19, 2016 to July 10th 2017, WoSign posted a total of 19 announcements, including announcements like mountain hiking competition in Youth Day, trips to Yangtze River Delta, Wosign's professional services won customers' acknowledgment. Of course your customers might be unable to replace certs in time if you only notified them July this year while browser announcement such decisions in Oct last year! _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
