----- Original Message ----- > From: "Kathleen Wilson" <[email protected]> > To: [email protected] > Sent: Tuesday, September 2, 2014 10:43:56 PM > Subject: Re: Removal of 1024 bit roots - Thawte and GTE CyberTrust > > On 9/2/14, 10:53 AM, Hubert Kario wrote: > > Removing the Thawte 1024 bit roots[1] causes following changes: > > > > Untrusted: +33 sites. > > Incomplete chain: +153, -2 sites. > > Complete chain: -184 sites. > > > > Sites that become untrusted: > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > [email protected] > > > > > Looks like those SSL certs are 5 year certs that were issued in 2010, so > those site administrators will be needing to update their certs within > the next year. > > The change is currently targeted for Firefox 35 (early January). That > gives Thawte/Symantec time to contact these customers, and get their > certs updated.
OK, I'll definitely will do another scan before that time. > > Removal of the GTE root has bigger impact: > > > > complete -86 > > incomplete +17, -8 > > untrusted +77 > > > > since the list is so large I won't be quoting it here. > > Would you please attach the list to the bug? done -- Regards, Hubert Kario Quality Engineer, QE BaseOS Security team Email: [email protected] Web: www.cz.redhat.com Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
