Ian G wrote:
It occurs to me that this process should be repeated
for every country.  This is the impracticality of the
"one true root list" writ large;  but that's where we're
at.

I recall that the policy and root list setting is just for
the default distribution, and not for any customised
distribution.

Well, yes, but AFAIK all the localized distributions simply take the root CA certificate database from the default (US English) distribution. And if they did modify the database, they might run into trademark issues in terms of their release being an "Official Release" under the Mozilla Trademark Polict for Localizations:


  http://www.mozilla.org/foundation/trademarks/l10n-policy.html

So, is there a German distribution?  And could that
distro team/list be charged with handling the German
CAs?

There is in fact a German-localized distribution, but IMO the localization teams for German (or any other language, for that matter) are probably going to be unwilling and/or unable to get involved with changing CA root lists, much less vetting root CAs. Their main concern is with language translation.


Even as a first step, one could suggest that the way
to get into the root list would be via the country distro.
First step, get on the country list, and then proceed
with promotion to the global default root list.

I think a better approach might be to work with MF-affiliated organizations, in particular Mozilla Europe in this case:


  http://www.mozilla-europe.org/en/about/

Working at a Europe-wide level I think we'd be much more likely to find one or more people who could assist myself or anyone else who might get designated by the MF to deal with CAs. This also has the advantage that Mozilla Europe (unlike the localization teams) is a formal legal entity that has an already-established relationship with the Mozilla Foundation.

I think I'll send a note to Tristan Nitot about this...

Frank

--
Frank Hecker
[EMAIL PROTECTED]
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to