Framarti <[email protected]> writes: >i'm working for a company that is issuing trusted SSL OV certificates as a >subsidiary CA. I was thinking about becoming a trusted root CA in order to >get rid of the fees per each issued certificate to be given to actual root CA. > >2 - Submission to a third party Audit (i.e. vs WebTrust program, baseline and >for publicly trusted certificates);
Depending on where you're starting from, that step is going to cost you somewhere around a million dollars and take at least a year of work to get through. That buys you an awful lot of certificates from a commercial CA at $5/year. Peter. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
