On 12/1/2007 2:44 PM, Eddy Nigg (StartCom Ltd.) wrote: > David E. Ross wrote: >> Remember, ASCII stands for American Standard Code for Information >> Interchange. Unless the X.509 specifications require it, we should >> avoid ethnocenterism. >> > I understand what you mean here, but X.509 is a technical standard, in > this case about how to print something in the certificate. X.509 and not > about policies and its eventual implications. We could use "Latin" > instead of ASCII if this should be the concern. >> If a root certificate is used to issue site certificates that will >> generally be used for Turkish language Web sites, I don't understand why >> the contents of the root certificate can't also be in Turkish. > Let me raise a point here...this isn't about "maybe", "might" and > "generally"....but about what should be done policy wise. The > assumptions by anyone here about who, when and how uses a certificate > issued by whomever is out of place....otherwise why verify anything at > all? Or does this subject line say anything to you? > > C=ישראל/ST=דרום/L=אילת/O=סטארטקום בע"מ/CN=ניק אדי
C is Israel. O appears to end (reading right-to-left) with a number, perhaps 72 40. (This is without referring to a template of the X.509 subject line.) Without the vowels, I can't read the rest. The point is that a large effort is made to internationalize Mozilla products. I see Firefox has versions in 46 different languages, including languages that don't use Latin characters. It would seem strange if such languages could then not be used in certificates. Perhaps, we might restrict certificates to only those 46 languages. Then, we could tap the internationalization teams to perform translations during the review of CA requests. -- David E. Ross <http://www.rossde.com/> Go to Mozdev at <http://www.mozdev.org/> for quick access to extensions for Firefox, Thunderbird, SeaMonkey, and other Mozilla-related applications. You can access Mozdev much more quickly than you can Mozilla Add-Ons. _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
