Re: Updating Mozilla CA certificate policy to address EV certificates

2007-10-09 Thread Eddy Nigg (StartCom Ltd.)
Hi Gerv, Gervase Markham wrote: > One of the big advantages of EV is that we have a minimum standard for > vetting that is actually enforced by audit - i.e. we don't have to > assess the vetting practices of every CA (even if they would tell us > what they were), because someone else has done i

Re: Updating Mozilla CA certificate policy to address EV certificates

2007-10-09 Thread Gervase Markham
Frank Hecker wrote: > In terms of audits associated with "EV-ness", I'm a little unclear on > what other documents need to be referenced. Section J of the EV > guidelines spells out the high-level audit requirements: basically > either go through the WebTrust EV process or a process deemed as >

Updating Mozilla CA certificate policy to address EV certificates

2007-10-09 Thread Frank Hecker
I've filed a bug against myself (399214) to update the current Mozilla CA certificate policy to address the issue of "extended validation" certificates. Part of that process involves public discussion of exactly what changes need to be made. Here are some quick thoughts of my own; note that t

Re: XML Schema Parser in FF

2007-10-09 Thread Anders Rundgren
I doubt that many people would like to develop using C++. Maybe you will some day need to bundle JRE to get a better foundation for security apps not to mention and rich web apps? Anders - Original Message - From: "Wan-Teh Chang" <[EMAIL PROTECTED]> To: Sent: Monday, October 08, 2007 18: