[cabfpub] Mozilla SHA-1 further restrictions (v4)

Gervase Markham gerv at mozilla.org
Fri Jan 13 10:34:59 UTC 2017

On 12/01/17 19:34, Tim Shirley wrote:
> Besides EKU, I presume this should also list adding the pathlen:0
> constraint if it was previously absent. 


> It would probably be good to
> include serial number as well, so no one could interpret this as a
> requirement to duplicate a serial number.

Yes. Serial number must be of the same length.


More information about the Public mailing list