On Fri, Jul 25, 2014 at 8:59 AM, Ryan Sleevi <[email protected]> wrote: > I think we need to be careful in suggesting arbitrary and capricious > requirements that fail to move the security needle further in a particular > direction.
I agree with everything that Ryan said in his email... > Do I wish everyone would include the u in favourite and colour? ... except this, which is 100% wrong. :) Requiring these policies to be asserted in the certificates would make certificates slightly worse (bigger), would create more work for everybody involved, and would have no practical end-user benefit. Cheeurs, Brian _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

