Re: DigiNotar EV root inclusion request

2008-04-30 Thread Frank Hecker
Frank Hecker wrote: > Rather than delay this application indefinitely until those questions > get resolved, I've decided to proceed in two steps. For step 1 I'll be > formally approving inclusion of the DigiNotar root in NSS, with SSL and > object signing trust bits enabled (no email trust bit).

Re: DigiNotar EV root inclusion request

2008-04-30 Thread Eddy Nigg (StartCom Ltd.)
Frank Hecker: P.S. Note that I'm shortening the normal public comment period somewhat. I'm doing that because based on the public comments I see no impediment to including the root for basic SSL and object signing, and I'd like to have Kai include it with the NSS changes for Network Solution

Re: DigiNotar EV root inclusion request

2008-04-30 Thread Frank Hecker
Frank Hecker wrote: > DigiNotar has applied to add a new root CA certificate to the Mozilla > root store and enable it for EV, as documented in the following bug: > > https://bugzilla.mozilla.org/show_bug.cgi?id=369357 > I have evaluated this request, as per the mozilla.org CA certificate > p

Re: Microsoft COFEE

2008-04-30 Thread Nelson B Bolyard
Arshad Noor wrote: > It can be "ordered to decrypt system passwords"??? So, I wonder what > attackers can do with this... > > Arshad Noor StrongAuth, Inc. > > "Microsoft revealed its development of a digital forensic analysis toolkit at > a security conference yesterday as part of a wider discus

Re: Anti-spam changes to dev-tech-crypto mailing list

2008-04-30 Thread Nelson B Bolyard
A few days ago, I wrote: > The situation has simply become intolerable, so as your list moderator, > I have taken steps to cut it off, and am prepared to take more steps. It seems that our mailing list server does not apply ANY of its mail filters to messages that go through the news->mail gateway

Microsoft COFEE

2008-04-30 Thread Arshad Noor
It can be "ordered to decrypt system passwords"??? So, I wonder what attackers can do with this... Arshad Noor StrongAuth, Inc. "Microsoft revealed its development of a digital forensic analysis toolkit at a security conference yesterday as part of a wider discussion of how technology can be u

Re: Anti-spam changes to dev-tech-crypto mailing list

2008-04-30 Thread Gervase Markham
Nelson B Bolyard wrote: > Thanks for telling me. > Is that being discussed in some newsgroup or mailing list? > I'd like to follow the progress on that topic. https://bugzilla.mozilla.org/show_bug.cgi?id=425122 Gerv ___ dev-tech-crypto mailing list dev-