On 17/06/2010 16:21, Garrett D'Amore wrote:
While ARC may or may not be the best place to review changes to the certificate list (it probably isn't), I think we should like to know how revisions will be made -- i.e. who decides when a change is appropriate and what the change will be? The project team? You? C-Team? P-Team?
The appropriate security team at the company producing the distribution based on the OpenSolaris source code. That may not be the same people as the security functionality engineering teams.
This is an internal policy decision for each distribution and as such for Oracle's distribution(s) based on the OpenSolaris codebase will not be discussed further here.
This project is delivering into the onnv gate the same initial set as what Firefox/Thunderbird uses, other distributions are free to use that as a starting point.
-- Darren J Moffat _______________________________________________ opensolaris-arc mailing list [email protected]
