We do not intend to revoke the end-user certificates.

We consider this to be a compliance issue for the CA certificates only. The CAs 
(i.e. the private keys) and end-user certificates issued from the CAs are not 
affected.

Regards
Mads

-----Original Message-----
From: dev-security-policy <[email protected]> On 
Behalf Of Malcolm Doody via dev-security-policy
Sent: onsdag 27. mars 2019 00:42
To: [email protected]
Subject: Buypass Incident Report - intermediate certificates noncompliant with 
BR 7.1

Are you intending to revoke all of the end-user certificates issued from the 
non compliant certificates?
If not, then can you state why?
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to