Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(163)

Unified Diff: net/data/ssl/name_constrained/README.md

Issue 2951343002: Remove residual support for SHA-1 public key pins. (Closed)
Patch Set: Remove the rest of HASH_VALUE_SHA1; respond to comments. Created 3 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/data/ssl/name_constrained/README.md
diff --git a/net/data/ssl/name_constrained/README.md b/net/data/ssl/name_constrained/README.md
new file mode 100644
index 0000000000000000000000000000000000000000..641183bfbe8f74cb7f223bdb933fa6094f1356f6
--- /dev/null
+++ b/net/data/ssl/name_constrained/README.md
@@ -0,0 +1,25 @@
+# Certificate Blacklist
+
+This directory contains a number of certificates and public keys which are to be
+treated as named-constrained during certiicate validation within Chromium-based
davidben 2017/06/26 21:36:43 certificate
+products.
+
+When applicable, additional information and the full certificate or key
+are included.
+
+## Compromises & Misissuances
+
+### India CCA
+
+For details, see <https://googleonlinesecurity.blogspot.com/2014/07/maintaining-digital-certificate-security.html>
+and <https://technet.microsoft.com/en-us/library/security/2982792.aspx>
+
+An unknown number of misissued certificates were issued by a sub-CA of
+India CCA, the India NIC. Due to the scope of the misissuance, the sub-CA
+was wholly revoked, and India CCA was constrained to a subset of India's
+ccTLD namespace.
+
+ * [2d66a702ae81ba03af8cff55ab318afa919039d9f31b4d64388680f81311b65a.pem](2d66a702ae81ba03af8cff55ab318afa919039d9f31b4d64388680f81311b65a.pem)
+ * [60109bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7.pem](60109bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7.pem)
+ * [b9bea7860a962ea3611dab97ab6da3e21c1068b97d55575ed0e11279c11c8932.pem](b9bea7860a962ea3611dab97ab6da3e21c1068b97d55575ed0e11279c11c8932.pem)
+ * [f375e2f77a108bacc4234894a9af308edeca1acd8fbde0e7aaa9634e9daf7e1c.pem](f375e2f77a108bacc4234894a9af308edeca1acd8fbde0e7aaa9634e9daf7e1c.pem)

Powered by Google App Engine
This is Rietveld 408576698