Re: Incidents involving the CA WoSign

2016-09-06 Thread Thijs Alkemade
ber 31, 2015 for at least a month by intentionally backdating the SHA-1 certificate. Best regards, Thijs Alkemade Computest • Pine Digital Security E: talkem...@computest.nl • I: www.computest.nl A: Signaalrood 25 • 2718 SH Zoetermeer Pine Digital Security is part of Computest smime.p7s Descriptio

Re: Apple's response to the WoSign incidents

2016-11-15 Thread Thijs Alkemade
rary/Security/Certificates.bundle/Contents/Resources/Allowed.plist I only see two CINNIC roots listed. Could you tell us what OS and version you used to determine that Apple has limited "WoSign CA Free SSL Certificate G2”? Best regards, Thijs Alkemade ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy

Re: DarkMatter Concerns

2019-02-27 Thread Thijs Alkemade via dev-security-policy
On 27 Feb 2019, at 09:07, tomasshredder--- via dev-security-policy mailto:dev-security-policy@lists.mozilla.org>> wrote: On Wednesday, February 27, 2019 at 3:27:05 AM UTC+1, Peter Gutmann wrote: Mike Kushner via dev-security-policy mailto:dev-security-policy@lists.mozilla.org>> writes: