Saturday, September 3, 2016

StartCom operated solely by WoSign in China - an analysis of the new StartCom website

I reported earlier that StartCom was secretly purchased by WoSign from the technical aspects and the business aspects. I'm now going to provide an analysis of the new StartCom website. The new StartCom website was launched in Dec 2015, one month after alleged WoSign's purchase.

Now I'm going to analyze the new Startcom website. The analysis further affirms the conclusion that StartCom was outright purchased by WoSign, rather than being in a partnership with WoSign.
As a native Chinese speaker, I can easily identify mistakes made in English caused by the influence of Chinese. The new StartCom webpage seems to completely designed and implemented in China.

Index

 StartCom Transparency
All issued SSL certificate is logged in Google Log server and other third party logs
with embedded SCT data in the SSL certificate.
This message appears at the bottom of all StartCom products.
Chinese doesn't have plural form or Subject-Verb Agreement. Hence "All issued SSL certificate is logged"

This is the exact same slogan on the WoSign's website
WoSign Transparency 
All issued SSL certificate is logged in Google Log server and other third party logs with embedded SCT data in the SSL certificate.
A word by word copy. This affirms the conclusion that StartCom was purchased by WoSign.

Sign-up

It takes just one minute to
Register your account to
Get Free SSL certificate
And free Email certificate
Chinese doesn't have capitalization, hence this weird capitalization in every new line.
No article in Chinese, hence "Get Free SSL certificate"


the StartPKI page

It uses very poor English such as
Sign-up and Paid
Just tell us what you want
Give you a unbelievable price
Sign agreement online
Paid the setup fee
We do not have tense or article in Chinese and the errors on "paid" and "a unbelievable price" are probably due to that. 

If you are using StartSSL, the certificate and certificate path look like this way that the issued by is StartCom
Hmm, No!

StartResell  launched in May 2016

Start to sell, make big money!
Setup your own website, start to sell your brand SSL certificate to your customers. Post customer’s identity information to StartSSL, StartCom charge the validation cost only with 50% off discount, all certificates issued from your intermediate CA is FREE. StartCom don’t charge your certificate cost, you make big money!
StartResell is in the background, you focus your sales, we do everything for you including PKI system, CRL and OCSP distribution, identity validation etc., we will use your company name to call your customer for identity validation, no other contact to your customer
Chinese grammars allow complete sentences to be separated by comma. Those are all run-on sentences in English.
Chinese doesn't have Subject-Verb Agreement, hence "StartCom charge"
We are sometimes confused on what preposition to use for a specific word, hence "focus your sales" "contact to your customer"



No any prepay and deposit need, just need to pay the dedicated Intermediate CA setup fee and annual maintenance fee;
"No any prepay" is translated word by word from Chinese, "没有任何预先付款”, which is very typical in various Chinese advertisements.

StartEncrypt

StartEncrypt Pro
Need an account in StartSSL, get the API token and API certificate;
Install and run, no any coding, support Windows server and Linux server;
Not just get the SSL certificate automatically, but install it automatically;
Not just Encrypted, but also identity validated to display EV Green Bar;
Not just 90 days period, but up to 39 months, more than 1180 days;
Not just low assurance DV SSL certificate, but also High assurance OV SSL and EV SSL;
Not just for one domain, but up to 120 domains with wildcard support;
For OV SSL and EV SSL, just charge the validation cost annually, certificate is FREE!
Again, run on sentences, word by word translation of "no any coding", "not just... but..." .

About US
Mr. Nigg thought: CAs (Certification Authorities) main duties are authentication, the customer should be charged only for authentication labor costs, the certificate file is just the carrier of the authenticated data, it is a digital file that can be issued by the system automatically, at this case the cost is almost negligible, it can be completely free of charge! For comparison, why is a newspapers more expensive than toilet paper? Because of its valuable content! It's the same with digital certificate, the certificate subject information is the verified information, without it a certificate would be worthless.
This paragraph supposedly described Eddy Nigg's thoughts. This is obviously not written by Eddy Nigg but someone from China.
Again, plural form, run on sentences. "Mr. Nigg thought:" the colon usage here is correct in Chinese.
The overall phrasing, the comparison are very much Chinese too.


Such common grammatical or semantical mistakes are littered across the entire website of StartCom. Besides, the overall way of phasing is very much Chinese. I'm hard pressed to find even one error-free paragraph in natural English on the StartCom site.

Conclusion

The above shows that the website was designed and implemented solely in China by WoSign without any English speaker involved. As even a casual inspector who is a native English speaker can immediately identify problems with the official site, we can only assume that StartCom currently has no non-Chinese staff or even staff who speak fluent English. This further affirms the conclusion that StartCom was outright purchased by WoSign, rather than being in a partnership with WoSign.


13 comments:

  1. If you want to insert Spyware into a browser this is a great way to start. (Pun intended )

    ReplyDelete
  2. If you look at the page source, it's also clear it was created for (by) a chinese audience.

    https://www.startssl.com/css/startcom.css?v=2016050905

    .center_t {
    text-align: center;
    }
    /* 可选属性 */
    ul, li {
    list-style: none outside;
    }

    textarea {
    word-wrap: break-word;
    }

    input[type="button"], input[type="submit"] {
    text-align: center;
    cursor: pointer;
    font-family: Helvetica,tahoma,Arial,'\5FAE\8F6F\96C5\9ED1','Hiragino Sans GB','\5b8b\4f53',sans-serif;
    font: Helvetica,tahoma,Arial,'\5FAE\8F6F\96C5\9ED1','Hiragino Sans GB','\5b8b\4f53',sans-serif;
    }

    body {
    margin: 0;
    padding: 0;
    color: #333;
    font-family: Helvetica,tahoma,Arial,'\5FAE\8F6F\96C5\9ED1','Hiragino Sans GB','\5b8b\4f53',sans-serif;
    font: Helvetica,tahoma,Arial,'\5FAE\8F6F\96C5\9ED1','Hiragino Sans GB','\5b8b\4f53',sans-serif;
    min-width: 1340px;
    }

    ReplyDelete
  3. The language check also special cases Chinese.
    (Also, changing the language type from the site's navbar reloaded the site, but did not provide any translated text, unlike the old startssl site.)

    https://www.startssl.com/js/AccountJs/LanguageCheck.js?v=2016050905


    LanguageObj.ChangeLanguage = function (lang, mode) {
    var langHtml = "";
    var isGoCn = 0;
    switch (lang) {
    case "en-us":
    langHtml = "English";
    break;
    case "zh-cn":
    langHtml = "中 文";
    isGoCn = 1;
    break;
    case "ru-ru":
    langHtml = "Pусский";
    break;
    case "de-de":
    langHtml = "Deutsch";
    break;
    case "fr-fr":
    langHtml = "Francaise";
    break;
    case "cs-cz":
    langHtml = "Česky";
    break;
    default:
    langHtml = "English";
    break;
    }


    This library was also created by a Chinese person.
    https://www.startssl.com/js/lrtk.js

    "/*
    name : yanggang;
    QQ:392017299;
    E-mail:yanggang1@conew.com;
    */"

    ReplyDelete
  4. I have one question: if the machine revolution wold take place, can we make a virus that will just demolish all the machines?

    ReplyDelete
  5. Writers who are interested in providing academic writing assistance have a great deal for their passion for writing through essay writing jobs. See more literature review writing services

    ReplyDelete
  6. IF you are interested in getting even more education articles, visit this blog https://nerdymates.com/blog/rhetorical-essay

    ReplyDelete
  7. Really liked this part of the article, dewacintaqq with a nice and interesting topics have helped a lot of people who do not challenge things people should know you need more publicize this so many people who know about it are rare for people to know this, bandar togel online singapore hongkog sydney Success for you

    ReplyDelete
  8. This comment has been removed by the author.

    ReplyDelete

  9. Kami adalah agen judi online yang terpercaya di indonesia.Kami menyediakan beberapa macam permainan
    untuk yang hobi bermain Judi online
    dan pasang angka di Bandar togel
    Untuk yang gemar Taruhan bola
    kami juga menyediakan website nya.

    ReplyDelete
  10. Life is full of many challenges. Challenges that will make you or break you depending on how you handle it. Visit my site for more updates. God Bless to your site. Send Gift To pakistan

    ReplyDelete