On 2016-12-16 15:45, Gervase Markham wrote:
But secondly, I'm not banning the use of anyEKU, because Firefox doesn't trust cert chains that rely on it, so there's no need to ban it. Is there?
Can I point out again that Firefox (or NSS) is not the only user of the root store?
Kurt _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
