net/data/ssl/name_constrained/README.md - Issue 2951343002: Remove residual support for SHA-1 public key pins.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: net/data/ssl/name_constrained/README.md

Issue 2951343002: Remove residual support for SHA-1 public key pins. (Closed)

Patch Set: Remove the rest of HASH_VALUE_SHA1; respond to comments. Created 3 years, 5 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
(Empty)
	1 # Certificate Blacklist

	2

	3 This directory contains a number of certificates and public keys which are to be

	4 treated as named-constrained during certiicate validation within Chromium-based
	davidben 2017/06/26 21:36:43 certificate certificate
	5 products.

	6

	7 When applicable, additional information and the full certificate or key

	8 are included.

	9

	10 ## Compromises & Misissuances

	11

	12 ### India CCA

	13

	14 For details, see <https://googleonlinesecurity.blogspot.com/2014/07/maintaining- digital-certificate-security.html>

	15 and <https://technet.microsoft.com/en-us/library/security/2982792.aspx>

	16

	17 An unknown number of misissued certificates were issued by a sub-CA of

	18 India CCA, the India NIC. Due to the scope of the misissuance, the sub-CA

	19 was wholly revoked, and India CCA was constrained to a subset of India's

	20 ccTLD namespace.

	21

	22 * [2d66a702ae81ba03af8cff55ab318afa919039d9f31b4d64388680f81311b65a.pem](2d66a 702ae81ba03af8cff55ab318afa919039d9f31b4d64388680f81311b65a.pem)

	23 * [60109bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7.pem](60109 bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7.pem)

	24 * [b9bea7860a962ea3611dab97ab6da3e21c1068b97d55575ed0e11279c11c8932.pem](b9bea 7860a962ea3611dab97ab6da3e21c1068b97d55575ed0e11279c11c8932.pem)

	25 * [f375e2f77a108bacc4234894a9af308edeca1acd8fbde0e7aaa9634e9daf7e1c.pem](f375e 2f77a108bacc4234894a9af308edeca1acd8fbde0e7aaa9634e9daf7e1c.pem)

OLD	NEW