OCSP Responders Are An Attack Vector For SHA-1 Collisions

[Erwann Abalea]

First case is worrying, in that it means the root private key isn't offline or 
air-gaped.
_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy