Re: Microsec CA inclusion request

2008-10-19 Thread Kaspar Brand
Nelson B Bolyard wrote: > Kaspar Brand wrote, On 2008-10-18 00:18: >> Nelson B Bolyard wrote: > >>> Yes. Bad response, ugly errors, no fun. >> With the default settings in Firefox 3, it isn't that bad... remember >> that it's the "graceful failure" mode which is selected by default: >> > > Don't

Re: Microsec CA inclusion request

2008-10-18 Thread Nelson B Bolyard
Kaspar Brand wrote, On 2008-10-18 00:18: > Nelson B Bolyard wrote: >> Yes. Bad response, ugly errors, no fun. > > With the default settings in Firefox 3, it isn't that bad... remember > that it's the "graceful failure" mode which is selected by default: > Don't forget the OCSP checks done in c

Re: Microsec CA inclusion request

2008-10-18 Thread Kaspar Brand
Nelson B Bolyard wrote: > Frank Hecker wrote, On 2008-10-17 06:57: > >> Please refresh my memory here: As I understand it, the basic problem was >> that if the Microsec root were included in Firefox (or other products) >> and a user surfed to an SSL/TLS-enabled site with an end entity >> certif

Re: Microsec CA inclusion request

2008-10-06 Thread Rob Stradling
On Thursday 02 October 2008 22:43:02 Frank Hecker wrote: > * Microsec has a separate root used for OCSP, and apparently does not > offer OCSP as a general public service; please see the comments in the > bug. I'd like those of you who are OCSP experts to look at this issue > and tell us if you see

Re: Microsec CA inclusion request

2008-10-02 Thread Frank Hecker
Frank Hecker wrote: > I am now opening the first public discussion period for a request from > Microtec Ltd to add the Microsec e-Szigno Root CA root certificate to D'oh! It's "Microsec", *not* "Microtec". I got it right everywhere except for the subject line and the first sentence. Sigh... Fr