Re: Proposed revision to Mozilla CA certificate policy for interim use of draft EV guidelines

2008-01-25 Thread Paul Hoffman
Sorry, I didn't get time to respond to your message yesterday. Will there be a cutoff for when Mozilla requires audits against the final guidelines instead of allowing draft guidelines? --Paul Hoffman ___ dev-tech-crypto mailing list dev-tech-crypto@li

Re: Proposed revision to Mozilla CA certificate policy for interim use of draft EV guidelines

2008-01-25 Thread Frank Hecker
Paul Hoffman wrote: > Will there be a cutoff for when Mozilla requires audits against the > final guidelines instead of allowing draft guidelines? Yes, per the revised policy the cutoff date is June 30. Frank -- Frank Hecker [EMAIL PROTECTED] ___ dev

Re: Proposed revision to Mozilla CA certificate policy for interim use of draft EV guidelines

2008-01-25 Thread Frank Hecker
/projects/security/certs/policy/ Thanks to those of you who provided comments. Starting from now I will consider approval of CA EV requests based on the draft EV guidelines and criteria. Frank -- Frank Hecker [EMAIL PROTECTED] ___ dev-

Proposed revision to Mozilla CA certificate policy for interim use of draft EV guidelines

2008-01-24 Thread Frank Hecker
When we updated the Mozilla CA certificate policy (to revision 1.1) to accommodate requests related to Extended Validation (EV) certificates, we specified use of the 1.0 EV guidelines from the CAB Forum and the 1.0 EV criteria from WebTrust. As it happens, because of the relatively recent

Re: EV guidelines

2007-02-01 Thread Anders Rundgren
green bars and cute pad-locks is just "chrome" that means close to nothing for most people. Anders R - Original Message - From: "Ben Bucksch" <[EMAIL PROTECTED]> Newsgroups: mozilla.dev.security,mozilla.dev.tech.crypto To: Sent: Thursday, February 01, 2007 2

EV guidelines

2007-02-01 Thread Ben Bucksch
delines, and they'll automate as much as possible. Also, there are really heavy statements in there, e.g. the liability (37(a); see also <https://financialcryptography.com/mt/archives/000862.html>: If the CA followes the EV guidelines and the user gets ripped off, the CA is not