To echo Tim's remarks, this is really two issues:
1) A failure of controls (the current incident report)
2) A failure to revoke
I'm rather concerned about #2 and the lack of detail presently provided
regarding it, as well as the one week wait to filing the incident report
for #1.
ev-security-pol...@lists.mozilla.org
> Subject: Incident Report - Entrust Datacard issued certificates with the
> incorrect Organization Name
>
> On March 7, 2019, Entrust Datacard discovered that SSL certificates with
the
> wrong Organization value were issued to a customer. The investig
On March 7, 2019, Entrust Datacard discovered that SSL certificates with the
wrong Organization value were issued to a customer. The investigation was
completed 15 March 2019.
Details of the incident report can be found here,
https://bugzilla.mozilla.org/show_bug.cgi?id=1535735.
All
3 matches
Mail list logo
