WoSign request to include two root certificates and enable EV treatment
WoSign opened this case in 2013 to request Mozilla inclusion of two root certificates: “Certification Authority of WoSign” and “CA 沃通根证书.” The request also asked Mozilla to turn on all three trust bits for both roots and enable EV treatment. Mozilla reviewed the submission through information gathering, public discussion, and audit follow-up, and WoSign provided updated root certificates, test websites, and audit materials over time. In May 2014, Mozilla approved inclusion of the two roots and said it would file the NSS and PSM bugs for the actual changes. The thread later includes follow-up discussion about audit coverage, BR compliance, and later WebTrust audit reports, but the inclusion request itself was approved.
- WoSign requested Mozilla inclusion of two root certificates for its CA hierarchy.
- Mozilla approved inclusion of the two WoSign roots with EV enabled.
- NSS changes containing the WoSign roots were released.
- WoSign CA Limited — WoSign opened the bug and asked Mozilla to include its two roots, citing its CA operations and WebTrust audit.
- Mozilla representative — Mozilla accepted the bug and said it would proceed through the information verification phase.
- Mozilla representative — Mozilla closed the first public discussion and asked WoSign to resolve issues and obtain a new full audit covering the new roots.
- Mozilla representative — Mozilla opened the second public discussion for inclusion of the two named roots with EV treatment.
- Mozilla representative — Mozilla posted its assessment summary and listed the root URLs, test websites, and OCSP information.
- Mozilla representative — Mozilla approved inclusion of “Certification Authority of WoSign” and “CA 沃通根证书” and said it would file the NSS and PSM bugs.
- Mozilla representative — Mozilla filed bug 1017295 against NSS and bug 1017299 against PSM for the actual changes.