Re: DigiCert/Symantec updates

2017-11-16 Thread Nick Lamb via dev-security-policy
4.1 Further to Gerv's question in the bug, I see that Digicert have not actually enumerated the set of issued certificates which are affected. Are you confident that if it became necessary you can do this? I recommend doing this and reporting the count even if not asked to actually list all the

Re: DigiCert/Symantec updates

2017-11-16 Thread Kathleen Wilson via dev-security-policy
This hasn't shown up in Google Groups for me yet, so please see the message below from Jeremy. Note that there is a bug (https://bugzilla.mozilla.org/show_bug.cgi?id=1412993) and a Google support ticket open for this problem of messages that are posted via Google Groups not showing up in

DigiCert/Symantec updates

2017-11-15 Thread Jeremy Rowley via dev-security-policy
Hey everyone, I wanted to give the community and update on how the DigiCert-Symantec transition is going and make everyone aware of a few issues I recently created on Bugzilla. First, the good news. DigiCert has started validating and issuing certificates through the Symantec platform