Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-25 Thread Eric Mill
And for the benefit of readers of the thread not already familiar with this, below are the two documented browser approaches to revocation of intermediates that I'm aware of, for Firefox and Chrome. Both require browser-maintained (not CA-maintained) lists of revoked certificates to be updated

Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-25 Thread Peter Bowen
On Sat, Jun 25, 2016 at 3:50 AM, Ben Laurie wrote: > On 25 June 2016 at 00:56, Rob Stradling wrote: >> On 24/06/16 14:38, Rob Stradling wrote: >>> >>> I've just updated https://crt.sh/mozilla-disclosures. >>> >>> There's now a separate grouping for

Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-25 Thread Ben Laurie
On 25 June 2016 at 00:56, Rob Stradling wrote: > On 24/06/16 14:38, Rob Stradling wrote: >> >> I've just updated https://crt.sh/mozilla-disclosures. >> >> There's now a separate grouping for undisclosed intermediates for which >> all observed paths to a trusted root have