Re: Fwd: cacert.org

2006-02-17 Thread Kyle Hamilton
Ah, okie. How would one go about becoming certified as such an independent auditor? I'd like to apply for such Mozilla Foundation certification. -Kyle Hamilton On 2/17/06, Frank Hecker <[EMAIL PROTECTED]> wrote: > Kyle Hamilton wrote: > > I would sincerely hope that the direct and indirect cost

Re: Fwd: cacert.org

2006-02-17 Thread Frank Hecker
Kyle Hamilton wrote: I would sincerely hope that the direct and indirect costs of performing the audit (including travel expenses and labor) would be borne by the CA. My fault, I didn't quote the full policy: By "independent party" we mean a person or other entity who is not affiliated wi

Re: Fwd: cacert.org

2006-02-17 Thread Kyle Hamilton
I have a small clarification question here... > * an "independent party" can be someone "who is not affiliated with the > CA as an employee or director" and "is not financially compensated by > the CA". I would sincerely hope that the direct and indirect costs of performing the audit (including t

Re: list replies? (was Re: Fwd: cacert.org)

2006-02-17 Thread Manuzhai
3. Make these other Reply-To header choices: a) leave it alone (as the poster created it) [now configured this way.] b) strip it out completely c) replace its contents with a constant string, e.g. with name of list. There is a good summary of the debate "What to do with Reply-To" here:

Re: Fwd: cacert.org

2006-02-17 Thread David E. Ross
Frank Hecker wrote: Nelson B wrote: I believe it was Mr. David E. Ross http://www.rossde.com/ He used to be a regular in this newsgroup/alias, but the last time I saw a message from him was Feb 10 2004. :-( As I understand it, David got conscripted to serve on a grand jury. I believe he is st

Re: Fwd: cacert.org

2006-02-17 Thread Frank Hecker
Frank Hecker wrote: If a CA were to propose someone who was not an actual professional auditor authorized to do WebTrust or other formal audits, then that person (or persons) would have to meet the requirements above, the CA and/or would have to publish information regarding the person's quali

Re: Fwd: cacert.org

2006-02-17 Thread Frank Hecker
Gervase Markham wrote: And I don't know what Frank would say, but I'm not sure that a review from a single unqualified individual could meet the "WebTrust or equivalent" standard in the CA cert policy. The Mozilla CA certificate policy doesn't say anything about "WebTrust or equivalent". What

Re: Fwd: cacert.org

2006-02-17 Thread Frank Hecker
Nelson B wrote: I believe it was Mr. David E. Ross http://www.rossde.com/ He used to be a regular in this newsgroup/alias, but the last time I saw a message from him was Feb 10 2004. :-( As I understand it, David got conscripted to serve on a grand jury. I believe he is still serving on it, mo

Re: Fwd: cacert.org

2006-02-17 Thread Nelson B
Gervase Markham wrote: > Kyle Hamilton wrote: > >>As I recall, cacert.org was planning to be audited by one of the >>Mozilla guys directly. I don't know who, and I don't know when, but I >>kinda recall some discussion of this. > > I remember hearing someone say this, but when I asked, the name g

Re: Fwd: cacert.org

2006-02-17 Thread Kyle Hamilton
*nods* I'm pretty sure you're correct. What qualifications would be necessary? (Considering that auditors are supposed to be extremely skilled at finding things that are out of place... Webtrust uses CPA auditors. I don't know if most CPAs would have enough knowledge to be able to properly audit

Re: Fwd: cacert.org

2006-02-17 Thread Gervase Markham
Kyle Hamilton wrote: > As I recall, cacert.org was planning to be audited by one of the > Mozilla guys directly. I don't know who, and I don't know when, but I > kinda recall some discussion of this. I remember hearing someone say this, but when I asked, the name given wasn't anyone I'd ever hear

RE: pkcs11 provider password issues

2006-02-17 Thread Mark Hobbs
> > Mark Hobbs wrote: > > > > I've seen this problem recently with a commercial PKCS11 > provider I use and > > logged the following bug: > > > > https://bugzilla.mozilla.org/show_bug.cgi?id=326637 > > > > As far as I can see the problem is new with FF1.5, it did not exist in > > FF1.0.7. > > I sus