On 8/4/15 11:30 PM, Man Ho (Certizen) wrote:
I am wondering the purpose of the new column "Geographic Focus" and how
it is defined.
First of all, why is it necessary to distinguish "Geographic Focus"? is
it for browsers to implement technically constraint business of the root
CAs to such areas?
I do not have plans to use this information to technically constrain
roots certificates. And I am not aware of any such plans.
A group of students at Rose-Hulman Institue of Technology are doing a
senior project to create a Firefox Add-on that is a better Certificate
Manager than Firefox currently has, and has some additional features.
One of the additional features they would like to add is the ability to
display further information about the CA by correlating with data in
Salesforce (e.g. audit info, Geographic Focus, organization type).
Secondly, is it defined by business location of a root CA's sub CAs
operating in an area? Or, by business location of customer to whom a
certificate is issued? Or, by ccTLD of the customer's domain name?
I think it should be business location of the majority of customers to
whom the CA issues certificates.
Anyway given this new column has been added, I think "People's Republic
of China" = "China", isn't it? And Hongkong Post's geographic focus
should be "Hong Kong (SAR), China" because Hongkong Post has not yet
been able to issue certificates to customers in other provinces of China.
Updated.
Thanks,
Kathleen
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy
