Disclosing unconstrained emailProtection intermediates to CCADB

2017-07-07 Thread Rob Stradling via dev-security-policy
CAs, Version 2.5 of the Mozilla Root Store Policy classifies EKU=emailProtection intermediates as unconstrained when suitable name constraints aren't present. As a result, such intermediates need to be disclosed to the CCADB (although not until 15th January 2018 for those intermediates issue

Re: Final removal of trust in WoSign and StartCom Certificates

2017-07-07 Thread Patryk Szczygłowski via dev-security-policy
W dniu piątek, 7 lipca 2017 07:18:53 UTC+1 użytkownik asymm...@chromium.org napisał: > Hello M.D.S.P., > > We've posted the following update regarding Chrome's treatment of WoSign and > StartCom certificates to Chromium's Security-dev and net-dev groups. I've > included both links below in case