Re: InfoCert Acquisition of Camerfirma

2018-07-18 Thread Wayne Thayer via dev-security-policy
I would like to begin a 3-week public discussion period for InfoCert's acquisition of Camerfirma [1] as described in section 8.1 of the Mozilla Root Store Policy. I believe that the intent of our policy in this scenario is to identify and consider any risks introduced by the acquisition of

Re: Do We Now Require Separate Cross-certificates for SSL and S/MIME?

2018-07-18 Thread Wayne Thayer via dev-security-policy
Kathleen pointed out that one of the purposes of this section is to require disclosure of cross-certificates, and my first attempted fix seems to violate that purpose. Here is my second attempt to clarify the language in section 5.3: