Re: Trusted Recursive Resolver Policy in India

2019-11-21 Thread rich.salz--- via dev-security-policy
On Saturday, September 14, 2019 at 7:04:11 AM UTC+8, Wayne Thayer wrote: > Rich: I want to acknowledge your question, which I think is really "what is > the right forum for Mozilla TRR (DNS over HTTPS) policy [1] discussions?" I > don't currently have an answer for you, but will respond when I do.

Re: Trusted Recursive Resolver Policy in India

2019-09-11 Thread rich.salz--- via dev-security-policy
Is this list the right place to discuss the TRR policy? If so, could the wiki page on the policy be updated to point to it? ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy

Re: DarkMatter Concerns

2019-03-26 Thread rich.salz--- via dev-security-policy
> The New York Times article that you reference does not add anything new to > the misleading allegations previously published in the Reuters article. It > simply repeats ad-nauseum a false, and categorically denied, narrative about > DarkMatter, under the guise of an investigative reporting

Re: DarkMatter Concerns

2019-02-25 Thread rich.salz--- via dev-security-policy
Apart from the concerns others have already raised, I am bothered by the wording of one of the Dark Matter commitments, which says that "TLS certs intended for public trust" will be logged. What does public trust mean? Does it include certificates intended only for use within their country?