Julien R Pierre - Sun Microsystems wrote:
> Paul Hoffman wrote:
>> At 3:45 PM -0800 1/21/09, Nelson B Bolyard wrote:
>>> Perhaps Mozilla should change its policy to require CAs to revoke certs
>>> when the private key is known to be compromised, whether or not an
>>> attack
>>> is in evidence, as a condition of having trust bits in Firefox.
>>
>> Fully agree.
> 
> Thirded.

+1

> I'm surprised that isn't already the case :-(

Me too. :-/

Ciao, Michael.

--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to