On May 3, Apple submitted an update to the original incident report 
(https://bugzilla.mozilla.org/show_bug.cgi?id=1533655), which is reposted 
below.   
____________________________________________________________ 

Most certificates have been revoked and less than 1% of the total population of 
impacted certificates remains. As previously noted, it is expected that all 
impacted certificates will be revoked by July 15.

In a previous update, we committed to doing the following:

“The validator software that checks certificates for SSL Baseline compliance 
will be enhanced to evaluate collections of certificates instead of individual 
certificates. These enhancements are expected to be implemented by April 30, 
2019.”

The referenced software enhancements were implemented as planned prior to April 
30.

We expect to provide the next update soon after the July 15 milestone, on or 
about July 19.
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to