Open Bug 1089430 Opened 8 years ago Updated 2 months ago
mozilla::pkix doesn't verify that an IPAddress name constraint is a valid subnet mask
Neither does NSS. I am not sure what the compatibility impact is. Also, I'm not sure if we actually SHOULD do this check, because the spec doesn't say we should, though it seems to make sense to.
Priority: -- → P5
You need to log in before you can comment on or make changes to this bug.