Closed Bug 1444427 Opened 6 years ago Closed 4 years ago

Provide info regarding symantec distrust action

Categories

(Developer Documentation Graveyard :: Security, enhancement, P3)

All
Other
enhancement

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: selenamarie, Unassigned)

References

()

Details

:: Developer Documentation Request

      Request Type: Correction
     Gecko Version: unspecified
 Technical Contact: jjones@mozilla.com

:: Details

SEC_ERROR_UNKNOWN_ISSUER is going to happen for certificates that were issued through the Symantec CA. We should add an entry that explains that this might be happening and the user should let the website administrator know.
MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED will be the primary error. Some servers will still prompt SEC_ERROR_UNKNOWN_ISSUER if they are configured strangely, unfortunately.

We can point to https://wiki.mozilla.org/CA/Upcoming_Distrust_Actions from MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED, in particular.
See Also: → 1444440
Priority: P4 → P3
See Also: → 1409257
In Chrome, the error message mentions "ERR_CERT_SYMANTEC_LEGACY", which makes it really easy to connect the  dots.  Could we do something like that?
MDN Web Docs' bug reporting has now moved to GitHub. From now on, please file content bugs at https://github.com/mdn/sprints/issues/ and platform bugs at https://github.com/mdn/kuma/issues/.
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.