On 2017-06-08 13:31, [email protected] wrote:
This one is interesting since the domain name of the CRL resolves to an RFC
1918 IP address. Surely that is a violation of the baseline requirements.
https://crt.sh/?sha256=b82210cde9ddea0e14be29af647e4b32f96ed2a9ef1aa5baa9cc64b38b6c01ca
That seems to be a root CA. It does not mention any CRL. I don't expect
a root CA to have a CRL. I'm not sure from where crt.sh is getting the
CRL URL.
Kurt
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy
