Entrust issued two certificates where the IP Address was indicated in the dNSName form. Both certificates have been revoked. The bug has been resolved.
Details of the incident report can be found here, https://bugzilla.mozilla.org/show_bug.cgi?id=1448986. Thanks, Bruce. _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy