On Friday, March 11, 2022 at 10:19:17 AM UTC+3 MCC CS wrote: > I understand, what I propose is shipping Firefox with the certificate > built in > It doesn't work that way. Any browser or operating system won't include the certificate unless it complies with CA/B requirements: https://cabforum.org/ There are technical requirements for the CA and certificates it issue, which Ministry of Digital's PKI fails right away, usage requirements and policy requirements, which they don't state, etc.
-- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/b8893933-f809-420d-92a6-fc09ef37c0e7n%40mozilla.org.
