Subject: Re: [pkix] New version of the TLS feature draft

From: Gervase Markham <[email-masked]>
Date: Tue, 09 Sep 2014 15:24:11 +0100

Mozilla is in favour of changing TLS to provide a "must-staple"
indicator. We feel it's necessary to be able to get to hard-fail on
revocation problems, as part of our future integrated strategy to
improve how revocation works:

https://wiki.mozilla.org/CA:RevocationPlan

(I reference that page for information; this list is probably not the
place for discussing other aspects of our revocation plan if you have
questions or concerns about it. You probably want
mozilla.dev.security.policy[0] for that.)

Gerv

[0] https://www.mozilla.org/about/forums/#dev-security-policy