Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-26 Thread Nick Lamb
On Sunday, 26 June 2016 21:26:06 UTC+1, Ben Laurie wrote: > My concern is that is is trivial to demonstrate an intermediate is > revoked, yet still validate a chain that includes that "revoked" > certificate. Sure. If you decide not to check for revocation, then you won't know if it's revoked. I

Re: Comodo Legal Phishing attack against ISRG?

2016-06-26 Thread Steve
According to Josh, Comodo have filed for abandonment of their three related applications: https://letsencrypt.org/2016/06/23/defending-our-brand.html On Sun, Jun 26, 2016 at 2:15 PM wrote: > Hello, > > The following screenshot is from Comodo's forums. Either their forums have > been breached an

Comodo Legal Phishing attack against ISRG?

2016-06-26 Thread john . byrd . usa
Hello, The following screenshot is from Comodo's forums. Either their forums have been breached and the account of the CEO is being misused, or this is an actual post from their CEO. https://imgur.com/7MfFBar Comodo's CEO seems to be claiming that they created the Let's Encrypt brand and that

Re: Intermediate certificate disclosure deadline in 2 weeks

2016-06-26 Thread Nick Lamb
On Saturday, 25 June 2016 21:55:46 UTC+1, Ben Laurie wrote: > In practice, what does this mean? How does one revoke the path from > the trust anchor to the CA? This path will involve one or more certificates and the certificates can be revoked in the usual manner by their serial number. For most