dev-security-policy  

Messages by Thread

• • Re: Pre-Incident Report - AT&T GlobalSign customer CA Serial Number Entropy Wayne Thayer via dev-security-policy
• Pre-Incident report: PKIoverheid Serial Number Entropy Berge, J. van den (Jochem) - Logius via dev-security-policy
  • Re: Pre-Incident report: PKIoverheid Serial Number Entropy Wayne Thayer via dev-security-policy
  • RE: Pre-Incident report: PKIoverheid Serial Number Entropy Berge, J. van den (Jochem) - Logius via dev-security-policy
  • RE: Pre-Incident report: PKIoverheid Serial Number Entropy Berge, J. van den (Jochem) - Logius via dev-security-policy
• [fyi] Mozilla TLS Observatory downtime on march 14th Julien Vehent via dev-security-policy
• RE: GoDaddy Revocation Disclosure Jeremy Rowley via dev-security-policy
  • Re: GoDaddy Revocation Disclosure Ryan Sleevi via dev-security-policy
  • RE: GoDaddy Revocation Disclosure Jeremy Rowley via dev-security-policy
  • Re: GoDaddy Revocation Disclosure Ryan Sleevi via dev-security-policy
• Relaxation of the CAA check result in some CA asking the record to be remove and not corrected for insurance Thomas-Louis Laforest via dev-security-policy
  • Re: Relaxation of the CAA check result in some CA asking the record to be remove and not corrected for insurance Ryan Sleevi via dev-security-policy
• Incident report DFN-PKI: 40 OV certificates with wrong ST Jürgen Brauckmann via dev-security-policy
• What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Buschart, Rufus via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Ryan Sleevi via dev-security-policy
  • AW: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Buschart, Rufus via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Ryan Sleevi via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Hector Martin 'marcan' via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Mike Kushner via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Ryan Sleevi via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Hector Martin 'marcan' via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Ryan Sleevi via dev-security-policy
  • Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Matthew Hardeman via dev-security-policy
  • Re: [FORGED] Re: What's the meaning of "non-sequential"? (AW: EJBCA defaulting to 63 bit serial numbers) Peter Gutmann via dev-security-policy
• Re: Initial Incident Report: Issuance of certificates with 63 bit serial number James Burton via dev-security-policy
  • Re: Initial Incident Report: Issuance of certificates with 63 bit serial number Wayne Thayer via dev-security-policy
• A modest proposal for a better BR 7.1 Matthew Hardeman via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Peter Gutmann via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Matthew Hardeman via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 okaphone.elektronika--- via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Matt Palmer via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 James Burton via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Jakob Bohm via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Ryan Sleevi via dev-security-policy
  • Serial Number Origin Transparency proposal (was Re: A modest proposal for a better BR 7.1) Rob Stradling via dev-security-policy
  • Re: Serial Number Origin Transparency proposal (was Re: A modest proposal for a better BR 7.1) Peter Gutmann via dev-security-policy
  • Re: Serial Number Origin Transparency proposal (was Re: A modest proposal for a better BR 7.1) Rob Stradling via dev-security-policy
  • Re: Serial Number Origin Transparency proposal (was Re: A modest proposal for a better BR 7.1) Matthew Hardeman via dev-security-policy
  • Re: Serial Number Origin Transparency proposal (was Re: A modest proposal for a better BR 7.1) Rob Stradling via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 bif via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Ryan Sleevi via dev-security-policy
  • Re: A modest proposal for a better BR 7.1 Piotr Kucharski via dev-security-policy
• Incident report: Issuance of certificates with curve-hash pairs no longer allowed by the Mozilla Root Store Policy Fotis Loukos via dev-security-policy
  • Re: Incident report: Issuance of certificates with curve-hash pairs no longer allowed by the Mozilla Root Store Policy Wayne Thayer via dev-security-policy
• Delegated Credentials and the Web PKI watson--- via dev-security-policy
  • Re: Delegated Credentials and the Web PKI Ryan Sleevi via dev-security-policy
  • Re: Delegated Credentials and the Web PKI watson--- via dev-security-policy
  • Re: Delegated Credentials and the Web PKI Ryan Sleevi via dev-security-policy
• Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers Jakob Bohm via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
  • Re: Apple: Non-Compliant Serial Numbers certification_authority--- via dev-security-policy
• Next Root Store Policy Update Wayne Thayer via dev-security-policy
  • Re: Next Root Store Policy Update Wayne Thayer via dev-security-policy
  • Re: Next Root Store Policy Update Wayne Thayer via dev-security-policy
  • RE: Next Root Store Policy Update Jeremy Rowley via dev-security-policy
  • Re: Next Root Store Policy Update Wayne Thayer via dev-security-policy
• Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Matthew Hardeman via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Wayne Thayer via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy okaphone.elektronika--- via dev-security-policy
  • RE: Pre-Incident Report - GoDaddy Serial Number Entropy Jeremy Rowley via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Wayne Thayer via dev-security-policy
  • RE: Pre-Incident Report - GoDaddy Serial Number Entropy Jeremy Rowley via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Wayne Thayer via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Matt Palmer via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Peter Gutmann via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Adam Caudill via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Hector Martin 'marcan' via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Kurt Roeckx via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Richard Moore via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Peter Gutmann via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • RE: Pre-Incident Report - GoDaddy Serial Number Entropy Jeremy Rowley via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Rob Stradling via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Peter Bowen via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy identrust--- via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Rob Stradling via dev-security-policy
  • Survey of (potentially noncompliant) Serial Number Lengths Rob Stradling via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Rob Stradling via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Rob Stradling via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Kurt Roeckx via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Rob Stradling via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Hector Martin 'marcan' via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Rob Stradling via dev-security-policy
  • RE: Survey of (potentially noncompliant) Serial Number Lengths Doug Beattie via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Wayne Thayer via dev-security-policy
  • Re: Survey of (potentially noncompliant) Serial Number Lengths Andrew Ayer via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Hector Martin 'marcan' via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Kurt Roeckx via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Andrew via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Wayne Thayer via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Peter Gutmann via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Jaime Hablutzel via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Peter Gutmann via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Hector Martin 'marcan' via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Adam Caudill via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Ryan Sleevi via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Daymion Reynolds via dev-security-policy
  • Re: Pre-Incident Report - GoDaddy Serial Number Entropy Adam Caudill via dev-security-policy
• General issues that came up in the DarkMatter discussion(s) Jakob Bohm via dev-security-policy
  • EJBCA defaulting to 63 bit serial numbers Jakob Bohm via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matt Palmer via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Why BR 7.1 allows any serial number except 0 Peter Gutmann via dev-security-policy
  • Re: Why BR 7.1 allows any serial number except 0 Ryan Sleevi via dev-security-policy
  • Re: Why BR 7.1 allows any serial number except 0 Peter Gutmann via dev-security-policy
  • Re: Why BR 7.1 allows any serial number except 0 Ryan Sleevi via dev-security-policy
  • Re: Why BR 7.1 allows any serial number except 0 Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Bowen via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Dimitris Zacharopoulos via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Dimitris Zacharopoulos via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Tomas Gustavsson via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers James Burton via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Wayne Thayer via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Daymion Reynolds via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Ryan Sleevi via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Daymion Reynolds via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Bowen via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Jaime Hablutzel via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Jaime Hablutzel via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers bif via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matt Palmer via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Matthew Hardeman via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Peter Gutmann via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers okaphone.elektronika--- via dev-security-policy
  • Re: EJBCA defaulting to 63 bit serial numbers Mike Kushner via dev-security-policy
  • The current and future role of national CAs in the root program Jakob Bohm via dev-security-policy
  • Re: The current and future role of national CAs in the root program Ryan Sleevi via dev-security-policy
  • Re: The current and future role of national CAs in the root program Jakob Bohm via dev-security-policy
  • Re: The current and future role of national CAs in the root program Ryan Sleevi via dev-security-policy
  • Re: The current and future role of national CAs in the root program Peter Bowen via dev-security-policy
  • Re: The current and future role of national CAs in the root program Jakob Bohm via dev-security-policy
  • Re: The current and future role of national CAs in the root program Ryan Sleevi via dev-security-policy
• Incident Report: TrustCor Serial Number Entropy Neil Dunbar via dev-security-policy
  • Re: Incident Report: TrustCor Serial Number Entropy Wayne Thayer via dev-security-policy
• Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Sleevi via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Sleevi via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
  • Re: Google Trust Services and EJBCA serial number behavior Ryan Hurst via dev-security-policy
• 答复: Certificate Problem Report (9WG: CFCA certificate with invalid domain) 孙圣男 via dev-security-policy
  • Re: 答复: Certificate Problem Report (9WG: CFCA certificate with invalid domain) Paul Kehrer via dev-security-policy
  • Re: 答复: Certificate Problem Report (9WG: CFCA certificate with invalid domain) David E. Ross via dev-security-policy
  • Re: 答复: Certificate Problem Report (9WG: CFCA certificate with invalid domain) Wayne Thayer via dev-security-policy
• Incident report for DarkMatter CA - change to 128-bit serialNumbers Scott Rea via dev-security-policy

• Earlier messages
• Later messages