Closed Bug 1358546 Opened 8 years ago Closed 8 years ago

remove "CNNIC ROOT" and "China Internet Network Information Center EV Certificates Root" from NSS

Categories

(NSS :: CA Certificates Code, task)

Product:
NSS
Component:
CA Certificates Code
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1380868

People

(Reporter: keeler, Unassigned)

References

Details

As of bug 1151512 Firefox only trusts certificates issued from "CNNIC ROOT" or "China Internet Network Information Center EV Certificates Root" if they are on a built-in whitelist. As of the deprecation of SHA-1 and due to time passing, only 41 of those certificates would still validate correctly (if they are even still in use). Consequently, the compatibility impact of simply removing these roots is so low that we should just do so.
Blocks: 1356623
I think this is the same as bug 1380868, which has more details, so duping forward.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.