On Saturday, 9 July 2016 00:21:27 UTC+1, Rick Andrews wrote: > GSA which governs FPKI recently approved Symantec’s proposal for one-way > cross-certification with the FBCA and to remove the cross-certificate from > the Symantec CA to the FBCA. The cross certificate is expiring on June 31, > 2016 and Symantec does not intend to renew the certificate going forward.
Thank you Rick. That should make a big dent in the known undisclosed list just over three weeks from now and, thus hopefully eliminate the (presumably small but unknown) risk from mistakes within the FPKI contaminating the web PKI. _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy