Re: PSM 2.0 (PIP) docs now available

[Ben Bucksch]

Bob Relyea wrote:

> Very little. We aren't allowed to make any value judgements on the quality
> of a CA's certification process, or we take on the certification liability.

Outch. It was my assumption that the root CAs are very trusted and have 
to meet hard requirements to ensure that.

If a CA "2600 CertsFreeForAll" wants to be in Netscape 6, they can have 
that, and then issue e.g. bogus server certs?

If Beonex rejects some root CAs, can it be sued, if one of the 
remaining, included CAs turns out to be not trustworthy?

-- 
This message is protected by ROT0 encryption and the DMCA.
Reading is disallowed and will be prosecuted.