New issue
Advanced search Search tips

Issue 634470 link

Starred by 5 users

Issue metadata

Status: Untriaged
Owner: ----
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug

Blocking:
issue 410574



Sign in to add a comment

[PKI library] Carefully consider the bounds for path building/verification

Project Member Reported by eroman@chromium.org, Aug 4 2016

Issue description

At a minimum document and test all the limitations and constraints, and compare them to other implementations.

But also ensure that they are reasonable, tested, and compatible with the Web's PKI.

For instance some considerations:

* Maximum number of certificates in a chain
* Maximum size of a certificate
* Timeout on AIA fetching
* Number of network fetches
* Timeout on path building
* Number of chains attempted
 

Sign in to add a comment