Re:Around 293 intermediate CAs in violation of CA/Browser gu...
by tialaramex on Monday July 06, 2020 @03:04PM
(#23751501)
I think it's not so much that it isn't feasible as that it doesn't serve any useful purpose at least to Mozilla.
The Firefox out-of-band revocation mechanism (OneCRL) certainly could revoke all these intermediates but Firefox isn't vulnerable to a problem here, so there's no obvious upside to doing that and it's disruptive.
The Firefox out-of-band revocation mechanism (OneCRL) certainly could revoke all these intermediates but Firefox isn't vulnerable to a problem here, so there's no obvious upside to doing that and it's disruptive.