Re: Legacy Root Certificates

2007-04-20 Thread Gervase Markham
David E. Ross wrote: > Recently, I visited the Web site of a bank where I have an account. The > site certificate caused the "Website Certified by an Unknown Authority" > popup to appear. The site certificate was signed by a Network Solutions > certificate, which in turn was signed by an AddTrust

Re: Legacy Root Certificates

2007-04-04 Thread Morgan Collett
Kyle Hamilton wrote: > Why would Network Solutions be signed by AddTrust? Network Solutions > owns Verisign. Actually, VeriSign acquired Netsol in 2000, retained the domain registry business and sold off Network Solutions the registrar again so they are no longer related. Morgan

Re: Legacy Root Certificates

2007-04-04 Thread Kaspar Brand
David E. Ross wrote: > There is NO Network Solutions root certificate in SeaMonkey. There > are four AddTrust root certificates in SeaMonkey. To clear up some uncertainty here - these are: AddTrust Class 1 CA Root AddTrust External CA Root AddTrust Public CA Root AddTrust Qualified C

Re: Legacy Root Certificates

2007-04-03 Thread David E. Ross
Kyle Hamilton wrote: > Why would Network Solutions be signed by AddTrust? Network Solutions > owns Verisign. > > You might want to verify out-of-band that the bank's site really does > belong to the appropriate bank. > > -Kyle H > > On 4/2/07, David E. Ross <[EMAIL PROTECTED]> wrote: >> Quite s

Re: Legacy Root Certificates

2007-04-03 Thread Kaspar Brand
Kyle Hamilton wrote: > Why would Network Solutions be signed by AddTrust? Network Solutions > owns Verisign. Not really true... and actually, it was the other way round: Verisign owned Network Solutions - from June 2000 to November 2003, when they sold it to Pivotal Equity. And recently (in Febru

Re: Legacy Root Certificates

2007-04-03 Thread Kyle Hamilton
Why would Network Solutions be signed by AddTrust? Network Solutions owns Verisign. You might want to verify out-of-band that the bank's site really does belong to the appropriate bank. -Kyle H On 4/2/07, David E. Ross <[EMAIL PROTECTED]> wrote: > Quite some time ago, I disabled root certificat

Re: Legacy Root Certificates

2007-04-03 Thread Gervase Markham
David E. Ross wrote: > Are there any plans to examine legacy root certificates that are > currently installed with Mozilla products? Will they be subjected to > the same rigorous criteria that are required for proposed new > certificates? That's a good question. We are currently focussing on clea