在 2016年9月26日星期一 UTC+8下午10:57:33，[email protected]写道： > On Monday, September 26, 2016 at 7:21:13 AM UTC-7, Gervase Markham wrote: > > Today, Mozilla is publishing an additional document containing further > > research into the back-dating of SHA-1 certificates, in violation of the > > CAB Forum Baseline Requirements, to avoid browser blocks. It also > > contains some conclusions we have drawn from the recent investigations, > > and a proposal for discussion regarding the action that Mozilla's root > > program should take in response. > > > > Because this document is extensive and contains embedded images, links > > and formatting, I have published it on Google Docs instead of as an > > email message here: > > > > https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/edit > > > > However, this forum is the appropriate place for discussing it. Please > > feel free to cut and paste any parts you wish to quote and comment on. > > > > Gerv > > "However, we don’t feel that Mozilla’s users in China have lower requirements > for CA trustworthiness than Mozilla’s users elsewhere." > To be honest, I do hope that there are not many XP SP2 users in China anymore.
We must use Windows XP becuase some programs can only run on XP. We have no money to get new programs and new Windows. Do you give $$$￥￥￥ to me??? You don't right? So please understand why we use XP. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
