RFE: Support 'Must-Staple' TLS Feature Extension

pki-bot / pki-issues-final

0 stars 0 forks source link

RFE: Support 'Must-Staple' TLS Feature Extension #1694

Open pki-bot opened 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #1706. Originally filed by bja (@sirwalrus) on 2015-11-30 17:54:56:

Assigned to nobody

Firefox recently announced support for the Must-Staple extension[1], which is specified in the certificate by the CA. This feature is highly desirable in an enterprise environment. It would be great if Dogtag supported this.

1 - https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2015-11-30 20:47:53

Per CS/DS meeting of 11/30/2015: 10.4 major

pki-bot commented 4 years ago

Comment from bja (@sirwalrus) at 2017-02-27 14:01:32

Metadata Update from @sirwalrus:

Issue set to the milestone: UNTRIAGED