зеркало из https://github.com/mozilla/gecko-dev.git
db950df22f
Summary: Change the security.pki.name_matching_mode pref to 3 for Enforce on Nightly. BR_9_2_1_SUBJECT_ALT_NAMES show that ~99.98% of encountered certificates have an acceptable SAN, so our compatibility risk is about 0.02%. BR_9_2_2_SUBJECT_COMMON_NAME also shows, 99.89% of certificate common names are present in a subject alternative name extension, giving a worst-case of 0.11% risk, though BR_9_2_1_SUBJECT_ALT_NAMES is more what we're affecting here. Test Plan: none Reviewers: keeler Tags: #secure-revision Bug #: 1461373 Differential Revision: https://phabricator.services.mozilla.com/D1277 --HG-- extra : transplant_source : %BF%7D%DEi%C7%9BhE%D0%C2d%9D0%AC%F8%9EM%E0%60U |
||
|---|---|---|
| .. | ||
| apps | ||
| certverifier | ||
| manager | ||
| nss | ||
| pkix | ||
| sandbox | ||
| .eslintrc.js | ||
| generate_certdata.py | ||
| generate_mapfile.py | ||
| moz.build | ||
| nss.symbols | ||