RE: WoSign Root Renewal Request

2015-06-18 Thread Ben Wilson
No objections here. -Original Message- From: dev-security-policy [mailto:dev-security-policy-bounces+ben=digicert@lists.mozilla.org] On Behalf Of Kathleen Wilson Sent: Wednesday, June 17, 2015 1:11 PM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: Re: WoSign Root Renewal

Re: CA scope transparency (was Re: Name-constraining government CAs, or not)

2015-06-18 Thread Dimitris Zacharopoulos
On 18/6/2015 12:50 πμ, Brian Smith wrote: I did, in my original message. HARICA's constraint includes *.org, which is much broader in scope than they intend to issue certificates for. dNSName constraints can't describe HARICA's scope. Cheers, Brian Hi Brian, It is very common for projects,