Comment 54 for bug 741528

Revision history for this message
In , Rob-comodo (rob-comodo) wrote :

Created attachment 520160
Additional Patch - 2 more bad certs

UPDATE: The attacker also caused the bad certificate for login.yahoo.com to be reissued twice. The attached patch will blacklist these 2 additional certs.

These 2 certs were revoked at the same time the other 7 certs were revoked, but somehow we omitted to communicate the details to you. Sincere apologies.