Dear reader, You would think that determining what country an organization is in is an easy task. It isn't, as evinced by a long history of bugs across CAs with doing this, two of which happen to be open now.
This raises a lot of questions. Do we really care about this information? If so, can we rely on it in practice? If not, why is it there to have bugs in it. Obviously for S/MIME the issues are a bit different than Server Auth, but I think there is some overlap. Sincerely, Watson -- Astra mortemque praestare gradatim -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CACsn0c%3D%2BrM514SoZM0Tubs7UO_794FrRFecg5NNtCsRtZowUYA%40mail.gmail.com.
