Policy-Discussion

[ianG <iang AT iang.org>]

following revocation of a sub CA in Malaysia is due to discovery of 512bit certs being used in an attack in the wild.  Some conjecture that the key may have been crunched.

-------- Original Message --------

Subject:	Mozilla Security Blog regarding compromise of 512-bit certs
Date:	Thu, 03 Nov 2011 11:02:51 -0700
From:	Kathleen Wilson <kathleen95014 AT yahoo.com>
To:	mozilla-dev-security-policy AT lists.mozilla.org
Newsgroups:	mozilla.dev.security.policy

http://blog.mozilla.com/security/2011/11/03/revoking-trust-in-digicert-sdn-bhd-intermediate-certificate-authority/


Related bug: https://bugzilla.mozilla.org/show_bug.cgi?id=698753


_______________________________________________
dev-security-policy mailing list
dev-security-policy AT lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy