Open Bug 1089430 Opened 6 years ago Updated 3 years ago

mozilla::pkix doesn't verify that an IPAddress name constraint is a valid subnet mask

Categories

(Core :: Security: PSM, defect, P5)

defect

Tracking

()

People

(Reporter: briansmith, Unassigned)

Details

(Whiteboard: [psm-backlog])

Neither does NSS. I am not sure what the compatibility impact is. Also, I'm not sure if we actually SHOULD do this check, because the spec doesn't say we should, though it seems to make sense to.
You need to log in before you can comment on or make changes to this bug.