On Thu, Jul 12, 2018 at 10:22 AM Ryan Sleevi <sle...@google.com> wrote:
> As you can know, providing information in a transparent and verifiable way
> tends to be a challenge, and in general, is unsuccessful within the
> CA/Browser Forum itself. However, it's also important to consider that the
> CA/Browser Forum does not serve as a clearinghouse for CA information - the
> set of publicly trusted CAs are a 1:1 representation of the Forum,
An important typo to call out - the set of publicly trusted CAs are NOT a
1:1 representation of the Forum.
That is, the Forum is a much smaller subset of those CAs that are trusted -
whether by a Browser member that participates in the Forum or those that do
not. That's why even having the Forum collect this information from its
participants does not provide an accurate view, and why discussing with
browser/root store vendors is the correct approach.
Apologies for that rather glaring omission.
Public mailing list