FYI, The documents for Microsoft's Root Certificate program http://www.microsoft.com/technet/archive/security/news/rootcert.mspx?mfr=true were updated somewhat recently. Very interesting reading.
They require annual audits. Every root CA has EKU info associated with it, limiting the applications for that CA. Other good stuff. _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto