Thank you for the notification. I have created
https://bugzilla.mozilla.org/show_bug.cgi?id=1582519 to track this issue.
On Fri, Sep 13, 2019 at 4:24 PM Apple CA via dev-security-policy <
> We’ve been following the discussions regarding how OCSP responders should
> handle Precertificates without corresponding certificates and what the
> appropriate response indicator should be (good, revoked, or unknown).
> Based on the recent clarifications at , we want to inform the community
> that Apple’s OCSP responders return a status of “unknown” for
> Precertificates without a corresponding certificate. We have identified one
> Precertificate that did not result in a corresponding certificate for which
> our OCSP responders are returning a status of “unknown” (
> We’ve updated the OCSP responders to respond “good” for that
> Precertificate and a long-term fix is in progress.
> We appreciate the efforts being made to amend the Mozilla Root Store
> Policy to explicitly address matters relating to Certificate Transparency.
> dev-security-policy mailing list
dev-security-policy mailing list