On May 3, Apple submitted an update to the original incident report
(https://bugzilla.mozilla.org/show_bug.cgi?id=1533655), which is reposted
below.
Most certificates have been revoked and less than 1% of the total population of
On April 6, Apple submitted an update to the original incident report
(https://bugzilla.mozilla.org/show_bug.cgi?id=1533655), which is reposted
below.
Over 10,000 additional certificates have been revoked since our last update.
In
On Monday, April 1, 2019 at 5:21:14 AM UTC-6, Jakob Bohm wrote:
[Apple Responses]
___
> For the benefit of the community (including possible future creation of
> policies for mass revocation scenarios), could
> 1. How many of the 54,583 certificates are issued to Apple owned and
> operated servers and services and how many not.
All impacted certificates were issued to Apple entities
> 2. What kinds of practical issues are delaying the replacement of
> certificates on any such Apple operated
On March 30, Apple submitted an update to the original incident report
(https://bugzilla.mozilla.org/show_bug.cgi?id=1533655), which is reposted
below.
___
We've been working our plan to revoke impacted
On March 22, Apple submitted an update to the original incident report
(https://bugzilla.mozilla.org/show_bug.cgi?id=1533655), which is reposted
below.
Over 115,000 additional certificates have been revoked since our last update
leaving less than 10% of the total population of impacted
On March 11, 2019; Apple submitted a followup Incident Report.
https://bugzilla.mozilla.org/show_bug.cgi?id=1533655.
Incident Report
How your CA first became aware of the problem (e.g. via a problem report
submitted to your Problem Reporting Mechanism, a discussion in
Apple just submitted an updated report:
Incident Report
How your CA first became aware of the problem (e.g. via a problem report
submitted to your Problem Reporting Mechanism, a discussion in
mozilla.dev.security.policy, a Bugzilla bug, or internal self-audit), and the
time and date.
Apple
Yesterday, Apple submitted this preliminary incident report:
https://bugzilla.mozilla.org/show_bug.cgi?id=1533655, which is reposted below.
On 2019-03-06 we determined that we were issuing certificates with
non-compliant serial numbers because of the EJBCA issue [1]. We fixed the
problem
9 matches
Mail list logo
