RE: Concerns with GlobalSign IP address validation

2020-08-10 Thread Doug Beattie via dev-security-policy
Hi Ian, Thanks for pointing this out to us. We looked at all orders issued since a new domain validation logic was rolled out in late May 2020 and we verified that no IP addresses were attempted to be validated using a constructed email address. Even if this was selected, the sending of that emai

RE: Concerns with GlobalSign IP address validation

2020-08-10 Thread Doug Beattie via dev-security-policy
Hi Ian, Thanks, we're looking into this. Doug -Original Message- From: dev-security-policy On Behalf Of i...--- via dev-security-policy Sent: Friday, August 7, 2020 11:37 PM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: Concerns with GlobalSign IP address validation Hi the