88
edits
Changes
→PKI: Updates for end of Q2 for PKI.
|-
| style="vertical-align:top;" |
* OneCRL - certificate revocation list push mechanism.* Final round of 1024-bit root removals.
------ Items above done before or during Q1 ------
* OCSP disabled for DV validations on Android.
* Support skipping OCSP for short-lived certificates.
------ Items above done before or during Q2 ------
* Certificate transparency (behind a pref).* ShortSupport the OCSP must-lived certificatesstaple extension.* Enable skipping OCSP Mustvalidation for short-staplelived certificates.* Support for CA-provided Intermediate certs certificate info in SalesForce.* OneCRL: support blocking by subject and public key.
------ Items above planned to be done before or during Q3 ------
* Add a mechanism to push security policy state updates.
------ Items above planned to be done before or during Q4 ------
* TLS 1.3
