Re: 5.3.1 Technically Constrained

2018-01-08 Thread Wayne Thayer via dev-security-policy
Ben, I'm about to use the term 'paragraph' to refer to the text within section 5.3.1 that is separated by carriage returns. The prior version of the policy contained the language in the final paragraph of section 5.3.1 - see

RE: 5.3.1 Technically Constrained

2018-01-08 Thread Ben Wilson via dev-security-policy
The problem with the wording of the paragraphs in section 5.3.1 is that they should have said "..., in order to be considered Technically Constrained, ..." . Right now they read like absolutes. -Original Message- From: dev-security-policy

5.3.1 Technically Constrained

2018-01-08 Thread Ben Wilson via dev-security-policy
Which "above paragraph" is being referenced in the following excerpt from Section 5.3.1 of the Mozilla Root Store Policy v.2.5 (https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/)? "Instead of complying with the above paragraph, intermediate certificates

Re: Mis-Issuance of a SSL multi-domain certificate

2018-01-08 Thread Wayne Thayer via dev-security-policy
Thank you for reporting this issue. I have created https://bugzilla.mozilla.org/show_bug.cgi?id=1428877 to track the issue and SwissSign's response. - Wayne On Mon, Jan 8, 2018 at 5:08 AM, Reinhard Dietrich via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > To whom it may

Mis-Issuance of a SSL multi-domain certificate

2018-01-08 Thread Reinhard Dietrich via dev-security-policy
To whom it may concern We have to inform you about a mis-issuance of a SSL multi-domain certificate with a wrong SAN entry showing the word “dns” again (no valid FQDN). We detected this error this morning based on our now implemented cablint based error detection system. The certificate