Comment by wolrah

> Is the Mozilla bugtracker usually a / the Go to party for these issues? Or just a coincidence in this case?

Yes, because of the project's open nature the Mozilla CA program Bugzilla and their dev-security-policy mailing list have become the de facto public discussion point for TLS-related issues.