Clarified on the new thread you started, but I don't believe there's any inconsistency. Further details on the new thread you started.
On Mon, Mar 27, 2017 at 10:02 AM, Roland Fantasia via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Anyone care to comment on the fact that Google's new subCAs under the GTS > branding have inconsistent EKU and KU bits? What's more disturbing is FF > doesn't make a fuss about it when connecting to the test sites (after > adding the roots manually of course). > _______________________________________________ > dev-security-policy mailing list > dev-security-policy@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-security-policy > _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy