RE: GlobalSign: Failure to revoke certificate with compromised private key within 24 hours

2020-03-10 Thread Arvid Vermote via dev-security-policy
sts.mozilla.org > Subject: GlobalSign: Failure to revoke certificate with compromised private key > within 24 hours > > A certificate with a publicly-disclosed private key was reported to GlobalSign for > revocation within the BR-mandated 24 hour period, however the revocation to

GlobalSign: Failure to revoke certificate with compromised private key within 24 hours

2020-03-09 Thread Matt Palmer via dev-security-policy
A certificate with a publicly-disclosed private key was reported to GlobalSign for revocation within the BR-mandated 24 hour period, however the revocation took place over 46 hours after the report was sent. Several requests for information I had already provided were made by GlobalSign, however