Table 7.
Responses on why the warnings are not worth fixing (S3)
| Id | Answer | Count(%) |
|---|---|---|
| A3.1 | It is not a production credential (for example, it is a credential for a non-shipping prototype) | 8 (36%) |
| A3.2 | The credential doesn’t protect any data, service, etc., with significant security value | 6 (27%) |
| A3.3 | The credential has additional protections (e.g. it is encrypted in the file, is password-protected, etc.) | 2 (9%) |
| A3.4 | It expires soon or has already been invalidated | 1 (5%) |
| A3.5 | Open-ended answers | 5 (23%) |