On Sat, Sep 26, 2020 at 9:09 PM Nick Lamb via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote:
> Let's Encrypt provides a community mutual assistance site (with > contributions from staff) on which a large volume of messages are > posted each day. > > https://community.letsencrypt.org/ > > Once the problem was identified did you check to see if any messages to > that site were likely related to this issue? I guess it's not very > likely with a small number of deviations. > We did not check the Let's Encrypt community site for reports about this issue. There's more detail in the linked Bugzilla issue: the nature of the bug was that it would only occur for certificates that never made it into users' hands, so no one would have seen OCSP errors. Additionally, the OCSP responses did not exceed their NotAfter date, so they would not have produced errors even if they were fetched by user agents. _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
