Re: CA Communication: Underscores in dNSNames

2018-11-15 Thread Rob Stradling via dev-security-policy
Wayne, many thanks for drawing the attention of the CAs to this matter. Sectigo (formerly Comodo CA) stopped issuing certificates with underscores in dNSNames soon after CABForum ballot 202 failed. A search of our CA database this week found 251 certificates that are in scope for the BRs, expi

Re: Questions regarding the qualifications and competency of TUVIT

2018-11-15 Thread Ryan Sleevi via dev-security-policy
On Wed, Nov 14, 2018 at 10:39 PM Wayne Thayer via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > While I see some small steps being made toward a common understanding of > the issue, there is still fundamental and subjective disagreement on the > severity, and it's not clear