* Frank Hecker: > I have just posted draft 10 of the proposed CA certificate policy: > > http://www.hecker.org/mozilla/ca-certificate-policy
Sorry for jumping in so late. Some CAs claim copyright (or trademark rights, or whatever) on their *root* certificates, and license them in rather obnoxious ways (for example, require certain user behavior which has privacy implications). I believe that this is a significant problem, even if the license terms turn out to be unenforceable in most jurisdictions. After reading such a CA "license", the next question pops up: Are CAs which explicitly disclaim responsibility for the certificates they issue acceptable for inclusion? _______________________________________________ mozilla-crypto mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-crypto
