On Tuesday, 10 May 2016 09:10:49 UTC+1, Kurt Roeckx wrote:
> It's using a PrintableString with "Hautes-Pyrénées" in it, which is
> clearly wrong. A PrintableString has a very limited amount of valid
> characters. All their strings are PrintableStrings. They should
> probably switch most of those to UTF8String.
Ah yes, perhaps it is possible this sort of thing is what DocuSign is referring
to with
"As of 31st of March 2016, 10755 certificates are concerned by (e). Last
issuance date will be 06/30/2016. Last expiration date will be 06/30/2019."
Even though the intent of 4e was phase out of legacy encodings like
TeletexString, shoving things that aren't PrintableStrings into a
PrintableString is definitely worse.
If that is what they intended by their response, is the implied promise to fix
it at the end of next month ("last issuance date will be 06/30/2016")
acceptable to Mozilla? I guess either way we can hope for a clarification from
DocuSign.
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy
