Anyone care to comment on the fact that Google's new subCAs under the GTS branding have inconsistent EKU and KU bits? What's more disturbing is FF doesn't make a fuss about it when connecting to the test sites (after adding the roots manually of course). _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
Re: Google Trust Services roots
Roland Fantasia via dev-security-policy Mon, 27 Mar 2017 07:21:06 -0700
- RE: Criti... Richard Wang via dev-security-policy
- Re: Criti... urijah--- via dev-security-policy
- RE: Criti... Richard Wang via dev-security-policy
- Re: Criti... Florian Weimer via dev-security-policy
- Re: Criti... Dimitris Zacharopoulos via dev-security-policy
- Re: Criti... Jakob Bohm via dev-security-policy
- Re: Criti... Alex Gaynor via dev-security-policy
- Re: Criti... Jakob Bohm via dev-security-policy
- Re: Criti... Gervase Markham via dev-security-policy
- Re: Criti... Jakob Bohm via dev-security-policy
- Re: Googl... Roland Fantasia via dev-security-policy
- Re: Googl... Ryan Sleevi via dev-security-policy
- Re: Googl... okaphone.elektronika--- via dev-security-policy
- Re: Googl... Gervase Markham via dev-security-policy
- Re: Googl... Ryan Hurst via dev-security-policy
- Re: Googl... Jakob Bohm via dev-security-policy
- Re: Google Trust Serv... Peter Bowen via dev-security-policy
- Re: Google Trust Serv... Ryan Hurst via dev-security-policy
- Re: Google Trust Services ... Gervase Markham via dev-security-policy
- RE: Google Trust Serv... Richard Wang via dev-security-policy
- Re: Google Trust ... Ryan Sleevi via dev-security-policy