On 03/23/2009 08:13 PM, Nelson B Bolyard:
Perhaps PSM should have a feature, used at cert import time, that discovers
that the chain is incomplete and offers, at that time, to go and fetch the
missing certs in the chain via AIA.

Cold this be a solution which could be applied to Firefox as well in the error pages? Something like:

"The certificate appears to be signed by an unknown root. However the certificate indicates that it's chained to an issuer which is unknown. Shall Firefox try to fetch the issuer certificate?"

--
Regards

Signer: Eddy Nigg, StartCom Ltd.
Jabber: start...@startcom.org
Blog:   https://blog.startcom.org

--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to