Re: Initial Incident Report: Issuance of certificates with 63 bit serial number

2019-03-10 Thread Wayne Thayer via dev-security-policy
I am happy to create the bugs, and have done so for this issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1534147 On Sun, Mar 10, 2019 at 11:52 AM James Burton via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Hi Fotis, > > You need to file this as a bugzilla bug. > >

Re: Incident report: Issuance of certificates with curve-hash pairs no longer allowed by the Mozilla Root Store Policy

2019-03-10 Thread Wayne Thayer via dev-security-policy
Thank you for this incident report Fotis. I have created https://bugzilla.mozilla.org/show_bug.cgi?id=1534145 to track this issue. On Fri, Mar 8, 2019 at 4:37 PM Fotis Loukos via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > ### Problem description > > SSL.com has issued

Re: Initial Incident Report: Issuance of certificates with 63 bit serial number

2019-03-10 Thread James Burton via dev-security-policy
Hi Fotis, You need to file this as a bugzilla bug. Thank you, Burton On Sun, 10 Mar 2019 at 18:34, Fotis Loukos via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > SSL.com has been following the recent discussions at > mozilla.dev.security.policy regarding the behavior