Re: DNS records and delegation

2019-10-10 Thread Ryan Sleevi via dev-security-policy
On Thu, Oct 10, 2019 at 11:42 PM Jeremy Rowley via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Question, is there any prohibition against demonstration of domain control > being delegated to a third party or even the CA itself? I don't think so, > but figured we've

DNS records and delegation

2019-10-10 Thread Jeremy Rowley via dev-security-policy
Question, is there any prohibition against demonstration of domain control being delegated to a third party or even the CA itself? I don't think so, but figured we've discussed differences in interpretation a lot lately so wanted to see if people agreed. Section 3.2.2.4.7 in the CAB/F

Apple OCSP responders return responses with incorrect issuer

2019-10-10 Thread Apple CA via dev-security-policy
Apple has submitted this preliminary incident report: https://bugzilla.mozilla.org/show_bug.cgi?id=1588001, which is reposted below. On 03-October-2019 at 13:52 PT, we were notified via a problem report submitted to our Problem Reporting Mechanism that our OCSP responders were returning