[EMAIL PROTECTED] wrote:
> To clarify, Network Solutions does not, so far, issue any types of
> certificate other than EV from or through this root.
> 
> The hierarchy is:
> 
> Network Solution Certificate Authority -> Network Solutions EV SSL CA -
>> End Entity
> 
> This request to add a root (enabled for EV) to Mozilla is for this top
> level CA "Network Solution Certificate Authority".

For everyone else's benefit: There was some confusion between Charlie 
Buckley and I which has now been resolved. I've corrected the Network 
Solutions entry in the pending list and added a comment to bug 403915. 
As noted, Network Solutions issues only EV certificates through the 
hierarchy rooted at the Network Solutions Certificate Authority root 
that's the subject of this application. Non-EV Network Solutions 
certificates are issued through an independent hierarchy.

> We reserve the right to issue other types of certificate from this
> root in the future, but our intention would be to have a separate
> subordinate CA issued by the "Network Solutions Certificate Authority"
> for each major type of certificate we issue.

 From my point of view Network Solutions also satisfies Mozilla policy 
requirements for non-EV SSL certs, based on the current CPS and audit 
situation. However issuance of email or code signing certs would require 
a new application and separate approval, since the current CPS doesn't 
address those types of certificates. (As noted in bug 403915, the 
current application is only for the SSL trust bit.)

Frank

-- 
Frank Hecker
[EMAIL PROTECTED]
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to