On 15/09/17 15:35, Inigo Barreira wrote: > No, those weren´t tests. We allowed the use of curves permitted by the BRs > but this issue came up in the mozilla policy (I think Arkadiusz posted) and I > also asked about it in the last CABF F2F (I asked Ryan about it) and then, > with that outcome and as the browsers didn´t accept them, we revoked and then > not allow the issuance. I think the discussion is still active (i.e. the use > of P-521).
Unless Mozilla says otherwise (which we do occasionally), you should not be basing your practice on what we are discussing, or even on draft versions of the policy, but on the published version - which clearly prohibits P-521. Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
