It occurs to me that this process should be repeated for every country. This is the impracticality of the "one true root list" writ large; but that's where we're at.
I recall that the policy and root list setting is just for the default distribution, and not for any customised distribution.
Well, yes, but AFAIK all the localized distributions simply take the root CA certificate database from the default (US English) distribution. And if they did modify the database, they might run into trademark issues in terms of their release being an "Official Release" under the Mozilla Trademark Polict for Localizations:
http://www.mozilla.org/foundation/trademarks/l10n-policy.html
So, is there a German distribution? And could that distro team/list be charged with handling the German CAs?
There is in fact a German-localized distribution, but IMO the localization teams for German (or any other language, for that matter) are probably going to be unwilling and/or unable to get involved with changing CA root lists, much less vetting root CAs. Their main concern is with language translation.
Even as a first step, one could suggest that the way to get into the root list would be via the country distro. First step, get on the country list, and then proceed with promotion to the global default root list.
I think a better approach might be to work with MF-affiliated organizations, in particular Mozilla Europe in this case:
http://www.mozilla-europe.org/en/about/
Working at a Europe-wide level I think we'd be much more likely to find one or more people who could assist myself or anyone else who might get designated by the MF to deal with CAs. This also has the advantage that Mozilla Europe (unlike the localization teams) is a formal legal entity that has an already-established relationship with the Mozilla Foundation.
I think I'll send a note to Tristan Nitot about this...
Frank
-- Frank Hecker [EMAIL PROTECTED] _______________________________________________ mozilla-crypto mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-crypto
