RE: Discovering unlogged certificates in internet-wide scans

2018-04-10 Thread Stephen Davidson via dev-security-policy
Hello, Many thanks for the research - this CT analysis is both fascinating and useful. I'd like to address the following statement: "Noncompliance already visible from previously logged certificates. The HydrantID SSL ICA G2 CA is trusted by Mozilla (via QuoVadis) for TLS

Re: Policy 2.6 Proposal: Add prohibition on CA key generation to policy

2018-04-10 Thread Jürgen Brauckmann via dev-security-policy
Am 10.04.2018 um 01:10 schrieb Wayne Thayer via dev-security-policy: Getting back to the earlier question about email certificates, I am now of the opinion that we should limit the scope of this policy update to TLS certificates. The current language for email certificates isn't clear and any

RE: Policy 2.6 Proposal: Add prohibition on CA key generation to policy

2018-04-10 Thread Doug Beattie via dev-security-policy
Wayne: I agree with your latest proposal. > -Original Message- > From: dev-security-policy [mailto:dev-security-policy- > bounces+doug.beattie=globalsign@lists.mozilla.org] On Behalf Of Wayne > Thayer via dev-security-policy > Sent: Monday, April 9, 2018 7:10 PM > To:

Re: c=US policy layer in development

2018-04-10 Thread okaphone.elektronika--- via dev-security-policy
On Tuesday, 10 April 2018 01:06:36 UTC+2, Peter Bachman wrote: > https://groups.google.com/forum/#!forum/cus-policy-layer Can you give us a few words, with the links you drop here? It would be nice. Especially when in order to see what the link is about you must first become a member of the

Re: c=US policy layer in development

2018-04-10 Thread westmail24--- via dev-security-policy
I do not understand this secrecy for reading anyway. Andrew ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy

Re: c=US policy layer in development

2018-04-10 Thread Peter Bowen via dev-security-policy
As far as I know, this has nothing to do with Mozilla policy. On Mon, Apr 9, 2018 at 10:28 PM westmail24--- via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > If Mozilla develops an open product, then why are some discussions > unavailable to users even for reading? (I'm