@Bob, our current thinking is that Firefox is not affected because the way mozpkix build the certificate chains. Can you please have a look and see how this affects RedHat, so that we can coordinate on which NSS release to target? Thx
Bug 1737470 Comment 9 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
@Bob, our current thinking is that Firefox is not affected because of the way mozpkix builds the certificate chains. Can you please have a look and see how this affects RedHat, so that we can coordinate on which NSS release to target? Thx