I think that a part of Mozilla's acceptance policy should be the CA
providing copies of certificates for technical validation, as well as
the more political validation method which we've dealt with up to this
point.

-Kyle H

On 8/4/06, Frank Hecker <[EMAIL PROTECTED]> wrote:
Frank Hecker wrote:
> Nelson B wrote:
>> Frank Hecker wrote:
>>
>>> In looking at Geotrust's request to add more root CA certs (bug
>>> 294916) I happened to notice that Geotrust offers a somewhat similar
>>> service, [snip]
>>> From the product description it appears that one domain goes in the
>>> CN attribute and the rest in SubjectAltName.
>>
>> That's not conformant with the relevant RFC.
>
> Thanks for the reply. I'll forward your comments to Geotrust.

Oh, and I should add that what I wrote was a guess based on the product
description on Geotrust's web site; I've never seen an actual example of
these certificates, so I could well be wrong.

Frank

--
Frank Hecker
[EMAIL PROTECTED]
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to