Nelson B Bolyard:
Those criteria are independent of the browser or application that uses them.
There isn't a "Mozilla EV criteria" and a separate "IE EV criteria" and
"Opera EV criteria".
Correct, however it's the browsers which must govern the re-auditing.
Actually this is the *ONLY* thing browser vendors must do. Everything
else is implied by the audit and hence very comfortable for Mozilla.
So, it seem to me that, rather than each browser duplicating the effort of
ongoing monitoring all the audits of all the EV CAs, there should be one
centralized place where that monitoring takes place, whose results are
publicly published, perhaps funded by all the browsers.
Well, you've got your man in the CAB forum...let them talk...
I would think that would be attractive to Mozilla, as it would give Mozilla
a chance to expend money (which I think they have in abundance) instead of
Frank's man hours (which are perhaps not quite as abundant. :)
I suggested to contribute in form of a management tool, which will make
governing of this particular issue very easy (including sending of
emails reminding about the upcoming audit report etc etc)...Guess the
hours to spend with this will be very little in comparison to now)...I
imagine a few clicks will do all the work ;-)
We'd want a grace period to include that time.
I suggested this as well, perhaps two or three month the most.
--
Regards
Signer: Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber: [EMAIL PROTECTED] <xmpp:[EMAIL PROTECTED]>
Blog: Join the Revolution! <http://blog.startcom.org>
Phone: +1.213.341.0390
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
