> > Your second statement – that Symantec issued lots of certificates
> > using Method 1 that DigiCert would never have issued – seems to imply
> > you have found misissuance by Symantec.
> 
> No, it doesn't. It means that the level of assurance that it went to the right
> person is not high enough for DigiCert, but they have no evidence it went to 
> the
> wrong person. It may have done; they don't know.

Exactly.

-Tim

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Public mailing list
[email protected]
https://cabforum.org/mailman/listinfo/public

Reply via email to