Re: Hongkong Post Root Inclusion Request

2009-02-24 Thread manho
On Feb 24, 7:57 am, Frank Hecker wrote: > Nelson B Bolyard wrote: > > 1. As you may know, the EV spec says that a client should not give a > > cert the full EV treatment unless/until it has done some successful > > revocation check (CRL or OCSP, this year) at least on the EE cert. > > Beginning wi

Re: Hongkong Post Root Inclusion Request

2009-02-23 Thread manho
On Feb 21, 8:53 am, Frank Hecker wrote: > Nelson B Bolyard wrote: > > Here is some info that should help with understanding all this. > > Thanks, this is very useful. So to sum up my understanding: > > If NSS had support for CRL DP, but no support for CIDP, then what would > happen with Hongkong P

Re: Hongkong Post Root Inclusion Request

2009-02-23 Thread manho
On Feb 21, 8:53 am, Frank Hecker wrote: > Nelson B Bolyard wrote: > > Here is some info that should help with understanding all this. > > Thanks, this is very useful. So to sum up my understanding: > > If NSS had support for CRL DP, but no support for CIDP, then what would > happen with Hongkong P

Re: Hongkong Post Root Inclusion Request

2009-02-13 Thread manho
On Feb 13, 11:58 am, Nelson B Bolyard wrote: > Michael Ströder wrote, On 2009-02-10 00:27: > > > Nelson B Bolyard wrote: > >> This is probably a policy question, but: are we willing to accept CAs > >> that use CRLs that we cannot parse? > > > I'd say no. > > >> Does this CA also implement OCSP?  C