CrossCert appear to be issuing BR-noncompliant certs under KISA roots now: https://crt.sh/?cablint=101&iCAID=40347&opt=cablint
We don't trust KISA as it's a Super-CA: https://crt.sh/?caid=55&opt=cablint https://bugzilla.mozilla.org/show_bug.cgi?id=335197 https://bugzilla.mozilla.org/show_bug.cgi?id=1310580 but other root stores do. Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
