Re: WoSign’s Ownership of StartCom

2016-09-11 Thread Han Yuwei
在 2016年9月9日星期五 UTC+8下午5:49:07,Gervase Markham写道: > Dear m.d.s.policy, > > We have been actively investigating reports that WoSign and StartCom may > have failed to comply with our policy on change of control notification. > Below is a summary representing the best of our knowledge and belief, > ba

Re: [FORGED] Re: WoSign’s Ownership of StartCom

2016-09-10 Thread Gervase Markham
On 10/09/16 09:23, Percy wrote: > I found the following info about Andy Ligg. Percy, this is verging on doxxing. Please can you leave the investigating of companies and people to the Mozilla CA team? If you have further observations about StartCom or WoSign's certificate corpus, those would be wel

Re: WoSign’s Ownership of StartCom

2016-09-10 Thread Gervase Markham
On 09/09/16 16:01, Peter Kurrasch wrote: > Indeed it will be interesting to read Richard's response, fully > recognizing that he chose not to reply to Mozilla's request ‎within a > fair amount of time. The fact that Eddy is not also responding is, > perhaps, all the information we need given what h

Re: WoSign’s Ownership of StartCom

2016-09-10 Thread Percy
On Friday, September 9, 2016 at 2:49:07 AM UTC-7, Gervase Markham wrote: > Dear m.d.s.policy, > > We have been actively investigating reports that WoSign and StartCom may > have failed to comply with our policy on change of control notification. > Below is a summary representing the best of our kn

Re: [FORGED] Re: WoSign’s Ownership of StartCom

2016-09-10 Thread Percy
I found the following info about Andy Ligg. 1) Interestingly, he used addresses/email/phone in HK, UK and Israel various domains. 2) He registered various StartEncrypt and StartResell domains in April 2016. He is the owner of a list of domains epki.cloud 2016-03-25 GODADDY sccrl.com

Re: [FORGED] Re: WoSign’s Ownership of StartCom

2016-09-10 Thread Percy
On Friday, September 9, 2016 at 10:14:43 PM UTC-7, Peter Gutmann wrote: > Peter Kurrasch writes: > > >I would also ask for confirmation that "Andy Ligg" is in fact a real person > >and not a pseudonym adopted by Richard or someone else. The similarity to > >Eddy's name is...remarkable. > > Andy

Re: [FORGED] Re: WoSign’s Ownership of StartCom

2016-09-09 Thread Peter Gutmann
Peter Kurrasch writes: >I would also ask for confirmation that "Andy Ligg" is in fact a real person >and not a pseudonym adopted by Richard or someone else. The similarity to >Eddy's name is...remarkable. Andy Ligg? The only similar name I saw in Gerv's post was Revital Nigg, who I'm guessing i

Re: WoSign’s Ownership of StartCom

2016-09-09 Thread Matt Palmer
Hi Gerv, On Fri, Sep 09, 2016 at 10:48:26AM +0100, Gervase Markham wrote: > We have been actively investigating reports that WoSign and StartCom may > have failed to comply with our policy on change of control notification. > Below is a summary representing the best of our knowledge and belief, >

Re: WoSign’s Ownership of StartCom

2016-09-09 Thread Peter Kurrasch
Thank you, Gerv and the Mozilla CA Team, for researching and compiling this information and raising awareness with the forum. I have been thinking about this ownership item in the Mozilla policy but had not put an

Re: WoSign’s Ownership of StartCom

2016-09-09 Thread Vincent Lynch
at 6:10 AM EST (24 minutes after Gervase's post), WoSign's CEO Richard Wang responded to this topic. However, it has not entered the Google Groups archive. I am posting his response below for completeness, so that his post can be part of the archive and not just the email thread:

Re: WoSign’s Ownership of StartCom

2016-09-09 Thread Richard Wang
Hi all, An announcement and disclosure will be made shortly pending completion of the business transaction. We can provide the proof documents to Mozilla to show this transaction is not finished if Mozilla think it is necessary. Regards, Richard > On 9 Sep 2016, at 17:47, Gervase Markham wr

WoSign’s Ownership of StartCom

2016-09-09 Thread Gervase Markham
Dear m.d.s.policy, We have been actively investigating reports that WoSign and StartCom may have failed to comply with our policy on change of control notification. Below is a summary representing the best of our knowledge and belief, based on our findings and investigation to date. The operation