On Saturday, 9 July 2016 00:21:27 UTC+1, Rick Andrews  wrote:
> GSA which governs FPKI recently approved Symantec’s proposal for one-way 
> cross-certification with the FBCA and to remove the cross-certificate from 
> the Symantec CA to the FBCA. The cross certificate is expiring on June 31, 
> 2016 and Symantec does not intend to renew the certificate going forward.

Thank you Rick. That should make a big dent in the known undisclosed list just 
over three weeks from now and, thus hopefully eliminate the (presumably small 
but unknown) risk from mistakes within the FPKI contaminating the web PKI.
_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to