dev-security-policy

Re: Questions Regarding the Use of the id-ad-caIssuers Extension under the BR！

Fri, 10 Apr 2026 08:59:33 GMT

2026/04/10 -- Arabella Barks

Questions Regarding the Use of the id-ad-caIssuers Extension under the BR！

Thu, 09 Apr 2026 14:43:04 GMT

2026/04/09 -- Awel Dia

Re: EJBCA - Open MPIC Issues and Impacted CAs

Wed, 08 Apr 2026 22:24:09 GMT

2026/04/08 -- 'Fabien Hochstrasser' via dev-security-policy@mozilla.org

Re: EJBCA - Open MPIC Issues and Impacted CAs

Tue, 07 Apr 2026 05:47:42 GMT

2026/04/07 -- 'Dimitris Zacharopoulos' via dev-security-policy@mozilla.org

Re: EJBCA - Open MPIC Issues and Impacted CAs

Tue, 07 Apr 2026 05:34:55 GMT

2026/04/07 -- 'Dimitris Zacharopoulos' via dev-security-policy@mozilla.org

Re: EJBCA - Open MPIC Issues and Impacted CAs

Mon, 06 Apr 2026 19:21:24 GMT

2026/04/06 -- Henry Birge-Lee

EJBCA - Open MPIC Issues and Impacted CAs

Mon, 06 Apr 2026 17:31:43 GMT

2026/04/06 -- Wayne

Re: Recent incidents regarding recording Baseline Requirements version

Fri, 03 Apr 2026 22:57:14 GMT

2026/04/03 -- Ryan Hurst

Re: Recent incidents regarding recording Baseline Requirements version

Fri, 03 Apr 2026 22:27:34 GMT

2026/04/03 -- Ryan Hurst

Re: Notification of acquisition of VikingCloud’s Digital Certificate Business

Wed, 25 Mar 2026 13:39:58 GMT

2026/03/25 -- 'Rebecca Kelley' via dev-security-policy@mozilla.org

Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786

Wed, 25 Mar 2026 03:09:33 GMT

2026/03/25 -- Michael Stone

Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786

Tue, 24 Mar 2026 02:54:21 GMT

2026/03/24 -- Peter Bowen

Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786

Mon, 23 Mar 2026 01:06:58 GMT

2026/03/23 -- Michael Stone

Re: CAA Checking: CNAME Target Returns SERVFAIL

Wed, 18 Mar 2026 15:40:26 GMT

2026/03/18 -- Awel Dia

Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786

Wed, 18 Mar 2026 06:50:37 GMT

2026/03/18 -- Henry Birge-Lee

Re: CAA Checking: CNAME Target Returns SERVFAIL

Wed, 18 Mar 2026 03:09:21 GMT

2026/03/18 -- Henry Birge-Lee

Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786

Tue, 17 Mar 2026 16:17:56 GMT

2026/03/17 -- 'Aaron Gable' via dev-security-policy@mozilla.org

CAA Checking: CNAME Target Returns SERVFAIL

Tue, 17 Mar 2026 15:58:02 GMT

2026/03/17 -- Awel Dia

Re: Irregular RSA Exponents

Tue, 17 Mar 2026 15:20:38 GMT

2026/03/17 -- 'Bas Westerbaan' via dev-security-policy@mozilla.org

Re: Irregular RSA Exponents

Tue, 17 Mar 2026 15:16:24 GMT

2026/03/17 -- David Adrian

Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786

Tue, 17 Mar 2026 14:56:53 GMT

2026/03/17 -- Michael Stone

Re: Irregular RSA Exponents

Tue, 17 Mar 2026 06:28:16 GMT

2026/03/17 -- Hanno Böck

Irregular RSA Exponents

Mon, 16 Mar 2026 21:40:42 GMT

2026/03/16 -- Wayne

Re: Revocation method is missing by subCA

Mon, 16 Mar 2026 16:55:53 GMT

2026/03/16 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Revocation method is missing by subCA

Mon, 16 Mar 2026 16:39:35 GMT

2026/03/16 -- Yuwei HAN (hanyuwei70)

Re: Revocation method is missing by subCA

Mon, 16 Mar 2026 16:38:16 GMT

2026/03/16 -- Yuwei HAN (hanyuwei70)

Re: Revocation method is missing by subCA

Mon, 16 Mar 2026 16:16:05 GMT

2026/03/16 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Revocation method is missing by subCA

Mon, 16 Mar 2026 14:40:47 GMT

2026/03/16 -- Hanno Böck

Re: Revocation method is missing by subCA

Mon, 16 Mar 2026 14:36:14 GMT

2026/03/16 -- 'Rob Stradling' via dev-security-policy@mozilla.org

Revocation method is missing by subCA

Mon, 16 Mar 2026 13:43:16 GMT

2026/03/16 -- Yuwei HAN (hanyuwei70)

Re: Public Discussion: Approval of JPRS as an Externally-Operated Subordinate CA under SECOM Root

Thu, 05 Mar 2026 15:19:40 GMT

2026/03/05 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Re: Notification of acquisition of VikingCloud’s Digital Certificate Business

Fri, 27 Feb 2026 22:51:27 GMT

2026/02/27 -- 'Rebecca Kelley' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Wed, 25 Feb 2026 04:49:35 GMT

2026/02/25 -- Watson Ladd

Re: Recent incidents regarding recording Baseline Requirements version

Wed, 25 Feb 2026 04:44:37 GMT

2026/02/25 -- Ryan Hurst

Re: https://opensource.apple.com/source/security_certificates/ is 404

Tue, 24 Feb 2026 21:07:29 GMT

2026/02/24 -- 'Rob Stradling' via dev-security-policy@mozilla.org

RE: Understanding accounturi handling across manual and ACME issuance (RFC 8657 Section 5.3)

Tue, 24 Feb 2026 08:36:17 GMT

2026/02/24 -- 大野文彰

Re: Recent incidents regarding recording Baseline Requirements version

Mon, 23 Feb 2026 20:40:59 GMT

2026/02/23 -- Ryan Hurst

Re: Recent incidents regarding recording Baseline Requirements version

Mon, 23 Feb 2026 19:21:56 GMT

2026/02/23 -- 'Trevoli Ponds-White' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Mon, 23 Feb 2026 18:35:05 GMT

2026/02/23 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Mon, 23 Feb 2026 17:42:13 GMT

2026/02/23 -- Ryan Hurst

Re: Recent incidents regarding recording Baseline Requirements version

Mon, 23 Feb 2026 17:20:37 GMT

2026/02/23 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Mon, 23 Feb 2026 16:42:10 GMT

2026/02/23 -- Ryan Hurst

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 23:36:55 GMT

2026/02/19 -- 'Trevoli Ponds-White' via dev-security-policy@mozilla.org

Re: Understanding accounturi handling across manual and ACME issuance (RFC 8657 Section 5.3)

Thu, 19 Feb 2026 23:33:10 GMT

2026/02/19 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 23:22:37 GMT

2026/02/19 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 20:36:30 GMT

2026/02/19 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 20:29:49 GMT

2026/02/19 -- Watson Ladd

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 19:53:01 GMT

2026/02/19 -- 'Gurleen Grewal' via dev-security-policy@mozilla.org

Understanding accounturi handling across manual and ACME issuance (RFC 8657 Section 5.3)

Thu, 19 Feb 2026 18:25:50 GMT

2026/02/19 -- 大野文彰

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 18:02:35 GMT

2026/02/19 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 17:41:53 GMT

2026/02/19 -- Ryan Hurst

Re: Recent incidents regarding recording Baseline Requirements version

Thu, 19 Feb 2026 00:18:32 GMT

2026/02/19 -- Dexter Castor Döpping

Re: Recent incidents regarding recording Baseline Requirements version

Wed, 18 Feb 2026 23:31:16 GMT

2026/02/18 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Recent incidents regarding recording Baseline Requirements version

Wed, 18 Feb 2026 23:26:45 GMT

2026/02/18 -- Watson Ladd

Recent incidents regarding recording Baseline Requirements version

Wed, 18 Feb 2026 23:21:22 GMT

2026/02/18 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Question about a Microsoft Root Program reuqirement

Thu, 12 Feb 2026 19:03:45 GMT

2026/02/12 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Question about a Microsoft Root Program reuqirement

Wed, 11 Feb 2026 08:09:56 GMT

2026/02/11 -- Peter Mate Erdosi

Re: Updated Mozilla CT Log Policy

Fri, 06 Feb 2026 01:07:32 GMT

2026/02/06 -- Joe DeBlasio

Re: Updated Mozilla CT Log Policy

Fri, 06 Feb 2026 01:06:43 GMT

2026/02/06 -- 'David Adrian' via dev-security-policy@mozilla.org

Re: Updated Mozilla CT Log Policy

Fri, 06 Feb 2026 00:41:30 GMT

2026/02/06 -- Suchan Seo

Removal of 'non-disclosable intermediate certificates' language from Mozilla CA Wiki

Mon, 02 Feb 2026 22:52:32 GMT

2026/02/02 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Public Discussion: Approval of JPRS as an Externally-Operated Subordinate CA under SECOM Root

Mon, 02 Feb 2026 22:01:53 GMT

2026/02/02 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Mon, 02 Feb 2026 08:46:06 GMT

2026/02/02 -- 'Roman Fischer' via dev-security-policy@mozilla.org

Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Sun, 01 Feb 2026 23:35:53 GMT

2026/02/01 -- Matt Palmer

Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Fri, 30 Jan 2026 09:05:41 GMT

2026/01/30 -- Hanno Böck

Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Fri, 30 Jan 2026 07:02:58 GMT

2026/01/30 -- 'Roman Fischer' via dev-security-policy@mozilla.org

Question on repurposing PublicCAs to PrivateCAs

Thu, 29 Jan 2026 20:26:48 GMT

2026/01/29 -- Arabella Barks

Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability

Wed, 21 Jan 2026 17:23:21 GMT

2026/01/21 -- Rollin Yu

Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability

Wed, 21 Jan 2026 11:45:04 GMT

2026/01/21 -- Rollin Yu

Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability

Wed, 21 Jan 2026 11:37:29 GMT

2026/01/21 -- Roger M Lambdin

Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability

Wed, 21 Jan 2026 11:13:28 GMT

2026/01/21 -- Roger M Lambdin

Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability

Wed, 21 Jan 2026 09:42:34 GMT

2026/01/21 -- Rollin Yu

Regarding the LiteSSL Certificate Issuance Authentication Vulnerability

Wed, 21 Jan 2026 08:59:13 GMT

2026/01/21 -- Roger M Lambdin

Re: [External Sender] Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Tue, 20 Jan 2026 10:36:46 GMT

2026/01/20 -- 'Adriano Santoni' via dev-security-policy@mozilla.org

Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Tue, 20 Jan 2026 10:17:19 GMT

2026/01/20 -- Hanno Böck

Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Tue, 20 Jan 2026 09:57:45 GMT

2026/01/20 -- 'Peter Gutmann' via dev-security-policy@mozilla.org

HTTP request blocking by CAs for CRL, CPS, AIA caIssuers

Mon, 19 Jan 2026 21:55:56 GMT

2026/01/19 -- Dexter Castor Döpping

https://opensource.apple.com/source/security_certificates/ is 404

Sun, 18 Jan 2026 15:23:36 GMT

2026/01/18 -- Arabella Barks

Approval of Microsec's e-Szigno TLS Root CA 2023

Mon, 05 Jan 2026 18:46:53 GMT

2026/01/05 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Re: Ongoing CT Logging Mistakes by CAs

Sat, 13 Dec 2025 13:50:54 GMT

2025/12/13 -- Filippo Valsorda

Re: Ongoing CT Logging Mistakes by CAs

Sat, 13 Dec 2025 12:09:19 GMT

2025/12/13 -- 'Rob Stradling' via dev-security-policy@mozilla.org

Reflections on 2025 and Areas of Focus for 2026

Fri, 12 Dec 2025 21:48:54 GMT

2025/12/12 -- 'Ben Wilson' via dev-security-policy@mozilla.org

Re: Ongoing CT Logging Mistakes by CAs

Fri, 12 Dec 2025 18:20:48 GMT

2025/12/12 -- Jeremy Rowley

Re: Ongoing CT Logging Mistakes by CAs

Fri, 12 Dec 2025 17:26:29 GMT

2025/12/12 -- Andrew Ayer

Re: Ongoing CT Logging Mistakes by CAs

Fri, 12 Dec 2025 16:40:53 GMT

2025/12/12 -- Alvin Wang

Re: Ongoing CT Logging Mistakes by CAs

Fri, 12 Dec 2025 16:32:39 GMT

2025/12/12 -- Jeremy Rowley

Re: Ongoing CT Logging Mistakes by CAs

Fri, 12 Dec 2025 12:58:43 GMT

2025/12/12 -- Andrew Ayer

Ongoing CT Logging Mistakes by CAs

Fri, 12 Dec 2025 01:56:11 GMT

2025/12/12 -- Andrew Ayer

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Wed, 03 Dec 2025 08:01:33 GMT

2025/12/03 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Wed, 03 Dec 2025 06:00:45 GMT

2025/12/03 -- Arabella Barks

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Wed, 03 Dec 2025 05:01:16 GMT

2025/12/03 -- Chya-Hung Tsai

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Tue, 02 Dec 2025 23:26:30 GMT

2025/12/02 -- 'Rob Stradling' via dev-security-policy@mozilla.org

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Tue, 02 Dec 2025 19:41:18 GMT

2025/12/02 -- Andrew Ayer

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Tue, 02 Dec 2025 16:33:14 GMT

2025/12/02 -- 'Aaron Gable' via dev-security-policy@mozilla.org

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Tue, 02 Dec 2025 16:31:25 GMT

2025/12/02 -- Andrew Ayer

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Tue, 02 Dec 2025 16:16:30 GMT

2025/12/02 -- Arabella Barks

Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog?

Tue, 02 Dec 2025 13:23:36 GMT

2025/12/02 -- Andrew Ayer

Re: Subject: Confusion/questions regarding SC-088v3

Wed, 26 Nov 2025 12:44:10 GMT

2025/11/26 -- 'Dimitris Zacharopoulos' via dev-security-policy@mozilla.org

Re: Subject: Confusion/questions regarding SC-088v3

Mon, 24 Nov 2025 11:03:28 GMT

2025/11/24 -- 'Tobias S. Josefowitz' via dev-security-policy@mozilla.org

Re: Subject: Confusion/questions regarding SC-088v3

Mon, 24 Nov 2025 07:27:41 GMT

2025/11/24 -- Arabella Barks