On Thursday, December 15, 2016 at 10:56:52 AM UTC-8, Brian Smith wrote: > It is important to fix the DoS issue with the path building when there > are many choices for the same subject. SKI/AKI matching only fixes the > DoS issue for benign cases, not malicious cases. Therefore some way of > limiting the resource usage without relying on AKI/SKI matching is > needed.
Indeed, and as per your comment here: https://bugzilla.mozilla.org/show_bug.cgi?id=1056341#c24 _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
