Re: Audit Reminder Email Summary

2019-03-19 Thread Kathleen Wilson via dev-security-policy
Here's the summary of Mozilla's audit reminder emails that were sent today by the CCADB. Reminder: The date logic for sending these emails is documented in the following wiki page. https://wiki.mozilla.org/CA/Email_templates#Audit_Reminder_Email_Templates - Audit Reminder is sent when

Virginia Tech misissuance report for 63 bit serial numbers

2019-03-19 Thread Doug Beattie via dev-security-policy
Hi Wayne, Can you open a Mozilla ticket for one of our older customers, Virginia Tech (VT)? Thanks. === 1. How your CA first became aware of the problem (e.g. via a problem report submitted to your Problem Reporting Mechanism, a discussion in

Pre-Incident Report - WISeKey Serial Number Entropy

2019-03-19 Thread Pedro Fuentes via dev-security-policy
In light of the recent discussion related to serial number Entropy, at WISeKey we could verify that we were also affected by this issue. We are still doing the final investigation, but I'd like to open this thread to initiate the disclosure. I'll do the same opening a bug. As a preliminary

Re: DarkMatter Concerns

2019-03-19 Thread Scott Rea via dev-security-policy
G’day Folks, It was a pleasure meeting many of the Mozilla community face to face at the CAB Forum meeting at Apple HQ last week. There are many others of you however, whose interface to the community is right here on this list, and so I wanted to share my perspective and feedback here on the