Kathleen Wilson <kwil...@mozilla.com> wrote: > How about the following?
That sounds right to me. It is important to fix the DoS issue with the path building when there are many choices for the same subject. SKI/AKI matching only fixes the DoS issue for benign cases, not malicious cases. Therefore some way of limiting the resource usage without relying on AKI/SKI matching is needed. I'm not sure how to incorporate the possibility of the issue being fixed into your text. Cheers, Brian _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
