Firefox official preset wotong two root certificates

Mozilla released the new version of Firefox 32 in September 2, which significantly improved the performance, significantly reduced memory usage and faster rendering speed, it provides users with a smoother and faster online browsing experience and allows developers to develop faster network applications and websites.

In addition, the browser has preset two root certificates: "Certification Authority of wosign" and "ca wo root certificate" (Chinese ), the "ca woken Root Certificate" is the only Chinese root certificate in the world. The preset Firefox browser marks that wosign's certificate issuing system has passed the world's strictest technical review and reached the world's first-class level!

The 32-version browser enabled the more secure network security service (NSS 3.16.3) released by Mozilla on April 9, July 3. This version has three highlights:

(1) Ten new root certificates, including wotong's two root certificates, are preset, mainly adding the root certificates of sha256 signature algorithm and ECC encryption algorithm, waotong's two root certificates are the only 4096-bit root certificates, so you do not need to upgrade the key length for the next 30 years. Among them, "ca woken Root Certificate" is the only Chinese root certificate trusted by NSS in the world.

(2) Five root certificates with insecure 1024-bit key lengths, including entrust, were deleted;

(3) disable SSL certificate usage and code signature certificate usage for 7 insecure 1024-bit key-length root certificates, including four Verisign (Symantec) certificates, these root certificates can only be used for client certificates. It is actually equivalent to deleted.

 

NSS (Network Security Services) is dominated by Mozilla, Firefox browser and many other software (including Google browser, Android, Apache, Java, Red Hat, etc) A group of cross-platform development libraries that support secure communication between clients and servers. Clients support smart cards, while servers support hardware SSL Acceleration. NSS provides a complete open source component that supports Secure Sockets Layer (SSL)/Transport Layer Security (TLS) and S/MIME encryption libraries.

Firefox official preset wotong two root certificates