Some initial thoughts:
1) Membership in the CAB Forum is not required for a CA to commit to
complying with the BR, and if non-membership avoids any obligation to comply
with the BRs, I think you'll quickly see a mass exodus from the group. No
member of the CAB Forum is bound to its
Kurt said I think that the webtrust audit is also based on a certain version
of the BR and that they might not have been updated yet to check the latest
version. So I think the audit report should indicate which version was
checked. If an audit was not for the last version that doesn't mean
2 matches
Mail list logo
