[EMAIL PROTECTED] wrote: > To clarify, Network Solutions does not, so far, issue any types of > certificate other than EV from or through this root. > > The hierarchy is: > > Network Solution Certificate Authority -> Network Solutions EV SSL CA - >> End Entity > > This request to add a root (enabled for EV) to Mozilla is for this top > level CA "Network Solution Certificate Authority".
For everyone else's benefit: There was some confusion between Charlie Buckley and I which has now been resolved. I've corrected the Network Solutions entry in the pending list and added a comment to bug 403915. As noted, Network Solutions issues only EV certificates through the hierarchy rooted at the Network Solutions Certificate Authority root that's the subject of this application. Non-EV Network Solutions certificates are issued through an independent hierarchy. > We reserve the right to issue other types of certificate from this > root in the future, but our intention would be to have a separate > subordinate CA issued by the "Network Solutions Certificate Authority" > for each major type of certificate we issue. From my point of view Network Solutions also satisfies Mozilla policy requirements for non-EV SSL certs, based on the current CPS and audit situation. However issuance of email or code signing certs would require a new application and separate approval, since the current CPS doesn't address those types of certificates. (As noted in bug 403915, the current application is only for the SSL trust bit.) Frank -- Frank Hecker [EMAIL PROTECTED] _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto