Re: Digicert revoking certain certs failing CNAME validation

2024-07-30 Thread Peter Fisher
Actually it looks like they have updated their incident page ( https://status.digicert.com/incidents/3sccz3v31lc9) with a new revocation date depending on if you get an exception. Also more details can be found here(https://bugzilla.mozilla.org/show_bug.cgi?id=1910322#c5). On Tue, Jul 30, 2024 at

Re: Digicert revoking certain certs failing CNAME validation

2024-07-30 Thread Peter Fisher
I have not noticed any revocation yet for my affected certificates. Has anyone had their affected certificates revoked yet? On Tue, Jul 30, 2024 at 12:35 PM Innocent Obi wrote: > Luckily it seems my org has since mitigated this, but it would be > interesting to know the broader impacts/who is br

Re: Digicert revoking certain certs failing CNAME validation

2024-07-30 Thread Innocent Obi
Luckily it seems my org has since mitigated this, but it would be interesting to know the broader impacts/who is broadly impacted. On Tue, Jul 30, 2024 at 12:20 PM Tom Beecher wrote: > If you're only getting this now, you're probably in trouble, because > they're revoking affected certs in about

Re: Digicert revoking certain certs failing CNAME validation

2024-07-30 Thread Tom Beecher
If you're only getting this now, you're probably in trouble, because they're revoking affected certs in about 15 mins. On Tue, Jul 30, 2024 at 2:53 PM Innocent Obi wrote: > Just in-case this hasn't made its way around: > https://www.digicert.com/support/certificate-revocation-incident. > >

Digicert revoking certain certs failing CNAME validation

2024-07-30 Thread Innocent Obi
Just in-case this hasn't made its way around: https://www.digicert.com/support/certificate-revocation-incident.

Re: DNSSEC failing when querying zones under ca. randomly but only from some regions

2024-07-30 Thread Adam Daniels
> On Jul 28, 2024, at 9:34 PM, Peter Potvin > wrote: > > We were actually having this same issue earlier tonight, though across .com > and .is domains as well. Interesting to see it's not just us. That’s an interesting observation, Peter. I hadn’t seen it outside of the .ca zone personally, b