https://blog.mozilla.org/security/2016/10/24/distrusting-new...
https://security.googleblog.com/2016/10/distrusting-wosign-a...