What is the earliest Firefox version eligible to receive updates through this? Is there *any* version so old the cert server won't talk to it?

What about Firefox and Waterfox? Do they use it?

https://sk.girlthi.ng/notes/askdda1eq0hd00xm

@mcc@mastodon.social shouldn't all ff browsers use onecrlhttps://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/ ?

@mcc Shouldn't browsers use system trust roots by default, or at least as an option?