Re: Security Blog about 1024-bit certs

2014-12-01 Thread Kathleen Wilson
On 9/8/14 5:05 PM, Kathleen Wilson wrote: I posted a security blog about 1024-bit certs... https://blog.mozilla.org/security/2014/09/08/phasing-out-certificates-with-1024-bit-rsa-keys/ == The second phase of migrating off of 1024-bit root certificates involves the changes identified in

Re: Staat der Nederlanden Root Renewal Request

2014-12-01 Thread Kathleen Wilson
On 10/23/14 11:50 AM, Kathleen Wilson wrote: Staat der Nederlanden has applied to include the “Staat der Nederlanden Root CA - G3” and “Staat der Nederlanden EV Root CA” root certificates; turn on the Websites and Email trust bits for the “Staat der Nederlanden Root CA - G3” root; turn on the

Re: DSV Gruppe Root Renewal Request

2014-12-01 Thread Kathleen Wilson
On 11/6/14 11:37 AM, Kathleen Wilson wrote: DSV Gruppe has applied to include the SHA-256 S-TRUST Universal Root CA root certificate and enable the Email trust bit. DSV Gruppe’s SHA-1 S-TRUST Authentication and Encryption Root CA 2005:PN root certificate was included in NSS via Bugzilla Bug

Entrust Root Renewal Request

2014-12-01 Thread Kathleen Wilson
Entrust has applied to include the “Entrust Root Certification Authority - G2” and “Entrust Root Certification Authority - EC1” root certificates, turn on all three trust bits for both, and enable EV treatment for both. These new root certificates are intended to eventually replace Entrust's