On 25/08/16 04:38, Richard Wang wrote: > R: NOT this case you think. Due to root inclusion problem, WoSign > root is cross signed by StartCom since 2011. And we shared some > facility with StartCom like CRL and OCSP distribution etc. But not > this case, as I declared in the previous email, this is a API > parameter option that can post data to any server located in any > place.
At what point in this process is the domain control validation done? Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

