Re: No CRL UI as of Firefox 24

2014-03-14 Thread Gervase Markham
On 13/03/14 19:20, Rick Andrews wrote: Since support for CRLs has been removed from Firefox, why does Mozilla's root policy (http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/maintenance/) require CAs to maintain and publish CRLs? Is it because Mozilla

Re: No CRL UI as of Firefox 24

2014-03-14 Thread Brian Smith
On Fri, Mar 14, 2014 at 4:05 AM, Gervase Markham g...@mozilla.org wrote: On 13/03/14 19:20, Rick Andrews wrote: Is it because Mozilla intends to build CRLs sets in the future? Yes. I always thought that the CRL requirement was in there because long of go we expected that we'd eventually

Re: No CRL UI as of Firefox 24

2014-03-13 Thread Rick Andrews
Since support for CRLs has been removed from Firefox, why does Mozilla's root policy (http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/maintenance/) require CAs to maintain and publish CRLs? Is it because Mozilla intends to build CRLs sets in the future?