Re: SSL Certs for Malicious Websites

2016-05-15 Thread Peter Bowen
(Top posting to bring the questions to the top) > 1) What does "Certificate misuse, or other types of fraud" in the definition > of Certificate Problem Report actually mean? > 2) What does "misused" mean in Section 4.9.1.1? I think there are a several of different things that could fall within

SSL Certs for Malicious Websites

2016-05-15 Thread Kathleen Wilson
All, I have been receiving questions about the following items in the CA/Browser Forum Baseline Requirements, and I would appreciate your input on what the answers are or should be. == In the Baseline Requirements == Definitions: Certificate Problem Report: Complaint of suspected Key

Re: March 2016 CA Communication Responses

2016-05-15 Thread Charles Reiss
On 04/13/16 20:32, Kathleen Wilson wrote: All, I have added links to reports of the responses to the March 2016 CA Communication survey: https://wiki.mozilla.org/CA:Communications#March_2016_Responses For question 1a, TeliaSonera indicated "2015 Oct 20", but the following SHA-1 server