Re: Consequences of mis-issuance under CNNIC

Absolutely agreed. There is ample evidence that CNNIC has not upheld their responsibilities in Mozilla's Certificate Inclusion Policy. Can someone please file a bug to remove CNNIC as a trusted root CA? -Daniel On Tuesday, March 24, 2015 at 2:18:12 PM UTC-7, Ryan Sleevi wrote: Based on the

Re: NSS Trust Bits for AOL root cert?

Ok, thanks for the clarification. I was wondering why https://pki-info.aol.com/ had stopped responding. It's sad to see them go. I was hoping they would start issuing free SSL certs with them or donate them to someone (Mozilla?) who would start issuing free SSL certs. We desperately need some

Re: Proposal: Switch generic icon to negative feedback for non-https sites

Yes, I started this thread. I officially declare this thread closed...even though I have no ability to enforce it. ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy

Re: Proposal: Switch generic icon to negative feedback for non-https sites

So the general top criticism I'm seeing to this proposal is that it's too expensive (in both time and money) get an SSL certificate. I'm feeling a general consensus that HTTPS is desired, but it's too difficult to attain for many sysadmins. So what can be done to lower the threshold to get