Re: Deutsche Telekom/T-Systems CA request

2008-07-30 Thread Thorsten Becker
Frank Hecker schrieb: > Second, in the case of T-Systems the issue seems to be that T-Systems > functions primarily as a root CA, not as a CA issuing end-entity > certificates. Therefore the T-Systems CPS does not address practices > relating to issuance of end-entity certificates. > The solu

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread Justin Dolske
rainer_k wrote: > If this is such a serious concern, why did Microsoft decicde to put > this CA inside the Windows > CA store and even distribute this via automatic update? I don't think "but Microsoft did it" is, in general, a convincing argument when it comes to good security practice. > The

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread Eddy Nigg
[EMAIL PROTECTED]: > Eddy, > > we (T-Systems) appreciate your input, even if we don't agree with all > of your statements. We strongly encourage you to give further feedback > until the end of the first week. We know that you do this in your > spare time to support Mozilla, but changing the CP and

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread Frank Hecker
rainer_k wrote: > If this is such a serious concern, why did Microsoft decicde to put > this CA inside the Windows > CA store and even distribute this via automatic update? > Installment of the Telekom CA into Firefox and putting more > restrictive policies for CAs into action in general > are two

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread wolfgang . pietrus
Eddy, we (T-Systems) appreciate your input, even if we don't agree with all of your statements. We strongly encourage you to give further feedback until the end of the first week. We know that you do this in your spare time to support Mozilla, but changing the CP and CPS is a serious act and shoul

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread Eddy Nigg
[EMAIL PROTECTED]: > Eddy, Frank, > > See the comments of T-Systems (WP as an Acronym of my Name Wolfgang > Pietrus) in the text below. Hallo Wolfgang, Vielen Dank fuer Ihre Antwort :-) >> >> Nevertheless I read mostly the English version which is easier to >> understand. Similar to Kathleen's

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread Eddy Nigg
rainer_k: > Eddy, > > If this is such a serious concern, why did Microsoft decicde to put > this CA inside the Windows > CA store and even distribute this via automatic update? > Installment of the Telekom CA into Firefox and putting more > restrictive policies for CAs into action in general > are

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread rainer_k
Eddy, If this is such a serious concern, why did Microsoft decicde to put this CA inside the Windows CA store and even distribute this via automatic update? Installment of the Telekom CA into Firefox and putting more restrictive policies for CAs into action in general are two different topics and

Re: Deutsche Telekom/T-Systems CA request

2008-07-22 Thread wolfgang . pietrus
Eddy, Frank, See the comments of T-Systems (WP as an Acronym of my Name Wolfgang Pietrus) in the text below. On Jul 20, 1:37 am, Eddy Nigg <[EMAIL PROTECTED]> wrote: > I started to review this inclusion request by reading parts of the > German version of the CP and CPS, which I understand is the

Re: Deutsche Telekom/T-Systems CA request

2008-07-19 Thread Eddy Nigg
I started to review this inclusion request by reading parts of the German version of the CP and CPS, which I understand is the only legal document. The English version seems to be a draft only and perhaps not legally binding. Nevertheless I read mostly the English version which is easier to un

Deutsche Telekom/T-Systems CA request

2008-07-16 Thread Frank Hecker
As I previously mentioned, I am now opening the first public discussion period for a request from T-Systems (a subsidiary of Deutsche Telekom) to add the Deutsche Telekom Root CA 2 root certificate to Mozilla. This is bug 378882, and Kathleen has produced an information document attached to the