Re: Microsoft root CA cert requirements updated

2008-02-29 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > Nelson Bolyard wrote: >> FYI, The documents for Microsoft's Root Certificate program >> http://www.microsoft.com/technet/archive/security/news/rootcert.mspx?mfr=true >> >> >> were updated somewhat recently. Very interesting reading. > Interesting also that the

Re: Microsoft root CA cert requirements updated

2008-02-29 Thread Eddy Nigg (StartCom Ltd.)
Nelson Bolyard wrote: > FYI, The documents for Microsoft's Root Certificate program > http://www.microsoft.com/technet/archive/security/news/rootcert.mspx?mfr=true > were updated somewhat recently. Very interesting reading. > > They require annual audits. > > Every root CA has EKU info associated

VeriSign request for EV root inclusion

2008-02-29 Thread Frank Hecker
VeriSign has applied to add a new EV root CA certificate to the Mozilla root store, as documented in the following bug: https://bugzilla.mozilla.org/show_bug.cgi?id=402947 and in the pending certificates list: http://www.mozilla.org/projects/security/certs/pending/#VeriSign I have evalua

Re: Questions about NSS PKCS#11 module configuration

2008-02-29 Thread Nelson Bolyard
Subrata Mazumdar wrote, On 2008-02-28 20:55: >>> My motivation is to access the keys/certs from profiles other than >>> current profile of the browser. >> Ah, you want to configure softoken to use a different set of databases >> rather than, or in addition to, the default. > Yes, what I meant

Microsoft root CA cert requirements updated

2008-02-29 Thread Nelson Bolyard
FYI, The documents for Microsoft's Root Certificate program http://www.microsoft.com/technet/archive/security/news/rootcert.mspx?mfr=true were updated somewhat recently. Very interesting reading. They require annual audits. Every root CA has EKU info associated with it, limiting the applications