Re: Reassessment of sub-ordinated CA certificates

2008-02-15 Thread Eddy Nigg (StartCom Ltd.)
Hi Michael, Michael Ströder wrote: > Eddy Nigg (StartCom Ltd.) wrote: >> The issuing CA of a root certificate is *supposed* to be responsible for >> its sub CAs naturally, however as a user of Mozilla software I want to >> be *assured*, that this is indeed the case. >> > > There is no way t

Re: WISeKey root CA certificate inclusion request

2008-02-15 Thread Gervase Markham
Kyle Hamilton wrote: > On Feb 13, 2008 4:08 AM, Gervase Markham <[EMAIL PROTECTED]> wrote: >> Has Thawte passed an audit while performing this action which (I assume) >> you are saying should cause them to fail? (I suspect the answer is Yes, >> but I want to check.) If so, who was the auditor? > >

Re: Reassessment of sub-ordinated CA certificates

2008-02-15 Thread Michael Ströder
Eddy Nigg (StartCom Ltd.) wrote: > [EMAIL PROTECTED] wrote: >> 1. The Root is responsible for certs issued by a Sub-CA and are >> included in the Root's WebTrust audit. > > The issuing CA of a root certificate is *supposed* to be responsible for > its sub CAs naturally, however as a user of Mozi

Re: Looking for a standard NSS function

2008-02-15 Thread Wan-Teh Chang
On Fri, Feb 15, 2008 at 2:35 AM, D3!$ <[EMAIL PROTECTED]> wrote: > Hi All!!! > > I am looking for a standard NSS/NSPR function which when called should > return and/or the local IP address and the port number to which SSL is > bound on the system. Use the NSPR function PR_GetSockName: http:

Re: Reassessment of sub-ordinated CA certificates

2008-02-15 Thread Eddy Nigg (StartCom Ltd.)
Michael Ströder wrote: > > From project experience I can confirm that it's exactly like what Kyle > suspects. I won't mention names but bringing your CA certs into MS IE > and the Mozilla products is simply a cash cow. Nothing else. In the > cases I know no audits were conducted on sub-CAs by t

Re: Reassessment of sub-ordinated CA certificates

2008-02-15 Thread Michael Ströder
Eddy Nigg (StartCom Ltd.) wrote: > Which raises at least with me the question, if this is indeed what was > envisioned when Mozilla decided to endorse EV as a better PKI model. Or > are people like Kyle perhaps rightfully thinking that he's being cheated > on by some CAs? I'm quoting a recent st

Looking for a standard NSS function

2008-02-15 Thread D3|\||\|!$
Hi All!!! I am looking for a standard NSS/NSPR function which when called should return and/or the local IP address and the port number to which SSL is bound on the system. If these functionalities are not present by default, I would like to recieve suggestions regarding the implementation of the