Re: DarkMatter Concerns

2019-02-23 Thread Kurt Roeckx via dev-security-policy
On Sat, Feb 23, 2019 at 02:07:38PM +0400, Scott Rea via dev-security-policy wrote: > G’day Wayne et al, > > In response to your post overnight (included below), I want to assure you > that DarkMatter’s work is solely focused on defensive cyber security, secure > communications and digital

Re: DarkMatter Concerns

2019-02-23 Thread ferenn.gnoll--- via dev-security-policy
On Friday, February 22, 2019 at 10:21:24 PM UTC+1, Wayne Thayer wrote: > We are not aware of direct evidence of misused > certificates in this case. However, the evidence does strongly suggest that > misuse is likely to occur, if it has not already. So, basing the trust of a CA on "suggestion"

Re: DarkMatter Concerns

2019-02-23 Thread Scott Rea via dev-security-policy
G’day Wayne et al, In response to your post overnight (included below), I want to assure you that DarkMatter’s work is solely focused on defensive cyber security, secure communications and digital transformation. We have never, nor will we ever, operate or manage non-defensive cyber

Re: DarkMatter Concerns

2019-02-23 Thread Kurt Roeckx via dev-security-policy
On Fri, Feb 22, 2019 at 03:45:39PM -0800, cooperq--- via dev-security-policy wrote: > On Friday, February 22, 2019 at 2:37:20 PM UTC-8, Jonathan Rudenberg wrote: > > With regards to the broader question, I believe that DarkMatter's alleged > > involvement with hacking campaigns is incompatible

Re: DarkMatter Concerns

2019-02-22 Thread rjarrrpcgp--- via dev-security-policy
On Friday, February 22, 2019 at 6:51:52 PM UTC-5, coo...@gmail.com wrote: > On Friday, February 22, 2019 at 2:37:20 PM UTC-8, Jonathan Rudenberg wrote: > > With regards to the broader question, I believe that DarkMatter's alleged > > involvement with hacking campaigns is incompatible with

Re: DarkMatter Concerns

2019-02-22 Thread cooperq--- via dev-security-policy
On Friday, February 22, 2019 at 2:37:20 PM UTC-8, Jonathan Rudenberg wrote: > With regards to the broader question, I believe that DarkMatter's alleged > involvement with hacking campaigns is incompatible with operating a > trustworthy CA. This combined with the existing record of apparent >

Re: DarkMatter Concerns

2019-02-22 Thread Jonathan Rudenberg via dev-security-policy
On Fri, Feb 22, 2019, at 16:21, Wayne Thayer via dev-security-policy wrote: > Despite the lack of > direct evidence of misissuance by DarkMatter, this may be a time when we > should use our discretion to act in the interest of individuals who rely on > our root store. It's worth noting that

DarkMatter Concerns

2019-02-22 Thread Wayne Thayer via dev-security-policy
The recent Reuters report on DarkMatter [1] has prompted numerous questions about their root inclusion request [2]. The questions that are being raised are equally applicable to their current status as a subordinate CA under QuoVadis (recently acquired by DigiCert [3]), so it seems appropriate to

<    1   2   3