Paul Hoffman:
> At 2:55 PM +0200 3/26/08, Eddy Nigg (StartCom Ltd.) wrote:
>   
>> - We are not seeking to cause any harm to Comodo or unilaterally remove
>> the roots from NSS. However can we seek the cooperation on the issues
>> which were raised and is Comodo willing to address this issues in good
>> faith?
>>     
>
> Why just Comodo? They are not the only CA that has some of the 
> features that you seem to dislike, Eddy.
>   

I didn't single out Comodo,considering the fact that other CAs have just 
weeks ago gone through the same process. I have reviewed all other CAs 
and raised questions and concerns concerning them if needed. At none of 
the CAs I've encountered the things Comodo does and it's my duty to 
speak up on this matter!

> At the very minimum, changing the subject line of the thread would 
> make it clear that the discussion is about a consideration of 
> changing the rules for everyone, not just Comodo.
>   

I have already mentioned that an eventual change in the Mozilla CA 
policy will have to be effective on all CAs. But I'd be really 
interested to know which other CA does issue *DOMAIN* *VALIDATED* 
certificate for a life-time of *TEN* years and also issues *DOMAIN* 
*VALIDATED* *WILD* *CARD* certificates without any additional 
verifications - and also these for a life-time of *TEN* years?

Robin from Comodo claims to know such CAs, maybe you know some too? In 
that case I request kindly to back it up and point us to the relevant 
CPS of the affected CAs. As of now this is an issue which concerns 
Comodo and its evaluation here.



-- 
Regards 
 
Signer:         Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber:         [EMAIL PROTECTED] <xmpp:[EMAIL PROTECTED]>
Blog:   Join the Revolution! <http://blog.startcom.org>
Phone:          +1.213.341.0390
 

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to