On Dec 25, 4:49 pm, Frank Hecker <hec...@mozillafoundation.org> wrote: > Michael Ströder wrote: > > Could you please define a time-frame within Comodo MUST react? > > Comodo (in the person of Robin Alden) has already made a reply: > > http://groups.google.com/group/mozilla.dev.tech.crypto/msg/b24e70ea2c396bb5 > > The question is, what else do what want Comodo to do in this case? They > still have some certificates unaccounted for in terms of verifying the > validation, and certainly I'd like to hear the status of that as soon as > possible. Beyond that? It's somewhat of an open question. > Frank, We have finished our initial investigation on the certificates issued by Certstar.
Of the 111 orders that had been placed through Certstar there remain 13 orders for which we have still not been able to gather adequate evidence of the applicant having domain control. We have therefore, regrettably, revoked the certificates on those orders. Of those 13 orders, 2 were placed by Eddy, for startcom.org and www.mozilla.com, as he has already described. As we previously stated, the certificate for www.mozilla.com was revoked shortly after it was issued. Of the remaining 11 orders we do not have any reason to believe that any were placed fraudulently and had we not set such a short timescale to effect the (re-)validation and had it not been over this Holiday season we believe that we would have been able to achieve validation of domain control for all 11. Certstar have passed to us all of their records for these customers and we will ensure that they are contacted for 2 purposes: a) to check if it would have been possible to complete the re- validation b) to offer a replacement certificate. Some of the orders have either been charged-back or refunded. We have to accept the possibility that some of those customers will not assist us in re-validation. Regards Robin Alden Comodo _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
