A certificate authority issuing SSL certificates for website encryption, owned by Qihoo 360, with security controversies surrounding misissued certificates
WoSign is a certificate authority (CA) founded in 2009 and headquartered in China. It issues SSL certificates that enable websites to use HTTPS and encrypt communication between browsers and servers.
WoSign rapidly grew to become one of the largest CAs issuing certificates for https websites. However, in 2016 it was discovered that WoSign had violated industry rules by issuing unauthorized certificates impersonating other domains. This led major browsers like Chrome and Firefox to distrust new WoSign certificates.
While WoSign is distrusted by some, it remains operational and continues to issue a high volume of SSL certificates. Many client devices still trust their root certificates. WoSign was acquired by Chinese tech company Qihoo 360 in 2017 and operates under its umbrella.
Overall, WoSign offers affordable certificate options but has faced trust and transparency issues in their past operations. While still an option, other CAs like Let's Encrypt may be more reliable choices for website encryption and HTTPS today.
Here are some alternatives to WoSign:
Suggest an alternative ❐