What is the rationale for waiting until March 20th for revocation given that
the issue was noticed on March 7th?

-Tim

> -----Original Message-----
> From: dev-security-policy <[email protected]>
On
> Behalf Of Bruce via dev-security-policy
> Sent: Friday, March 15, 2019 4:59 PM
> To: [email protected]
> Subject: Incident Report - Entrust Datacard issued certificates with the
> incorrect Organization Name
> 
> On March 7, 2019, Entrust Datacard discovered that SSL certificates with
the
> wrong Organization value were issued to a customer. The investigation was
> completed 15 March 2019.
> 
> Details of the incident report can be found here,
> https://bugzilla.mozilla.org/show_bug.cgi?id=1535735.
> 
> All certificates will be revoked by 20 March 2019.
> 
> Thanks, Bruce.
> _______________________________________________
> dev-security-policy mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-security-policy

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to