Re: Remove trust of Symantec's Class 3 Public Primary Certification Authority?

2015-12-15 Thread Jakob Bohm
On 15/12/2015 03:34, Andrew Ayer wrote: On Sat, 12 Dec 2015 16:56:04 -0800 Yuhong Bao wrote: I think this and most of the other 1024-bit roots was removed or restricted to email in Mozilla some time ago (last remaining one is Equifax). They had been consider

Re: Remove trust of Symantec's Class 3 Public Primary Certification Authority?

2015-12-14 Thread Andrew Ayer
On Sat, 12 Dec 2015 16:56:04 -0800 Yuhong Bao wrote: > I think this and most of the other 1024-bit roots was removed or > restricted to email in Mozilla some time ago (last remaining one is > Equifax). They had been consider obsolete for a long time. Indeed, the

Re: Remove trust of Symantec's Class 3 Public Primary Certification Authority?

2015-12-13 Thread Eric Mill
is also > 1024-bit. > > > > Date: Sat, 12 Dec 2015 20:07:57 -0500 > > Subject: RE: Remove trust of Symantec's Class 3 Public Primary > Certification Authority? > > From: e...@konklone.com > > To: yuhongbao_...@hotmail.com > > CC: mozilla-dev-security-pol...@lis

RE: Remove trust of Symantec's Class 3 Public Primary Certification Authority?

2015-12-12 Thread Yuhong Bao
The VeriSign "Class 3 Public Primary Certification Authority - G2" is also 1024-bit. > Date: Sat, 12 Dec 2015 20:07:57 -0500 > Subject: RE: Remove trust of Symantec's Class 3 Public Primary Certification > Authority? > F

Re: Remove trust of Symantec's Class 3 Public Primary Certification Authority?

2015-12-12 Thread Eric Mill
Peter Bowen has suggested that the G2 root should be considered the same way, since it seems to be used for the same purpose as the one Google referenced: https://twitter.com/pzb/status/675354162071252992 I believe this censys.io link is a (slightly) friendlier way of showing the same thing:

RE: Remove trust of Symantec's Class 3 Public Primary Certification Authority?

2015-12-12 Thread Eric Mill
; Equifax). They had been consider obsolete for a long time. > > > Date: Sun, 13 Dec 2015 00:41:45 +0100 > > From: k...@roeckx.be > > To: mozilla-dev-security-pol...@lists.mozilla.org > > Subject: Remove trust of Symantec's Class 3 Public Primary > Certification Authorit