Re: Certinomis Request to Include Renewed Root

2015-05-21 Thread Kathleen Wilson
On 5/5/15 2:37 PM, Kathleen Wilson wrote: On 5/4/15 4:02 PM, Ryan Sleevi wrote: On Fri, April 24, 2015 4:45 pm, kwil...@mozilla.com wrote: The request is documented in the following bug: https://bugzilla.mozilla.org/show_bug.cgi?id=937589 Does anyone have questions or comments about this

Re: Name-constraining government CAs, or not

2015-05-21 Thread Gervase Markham
On 19/05/15 12:14, Matt Palmer wrote: The *leverage* that can be applied to any particular CA doesn't change based on who operates it. Regardless of the operator, the only leverage we have is removal of the CA's root certs from the trust store (or otherwise neutering them). That certain CAs

Re: Name-constraining government CAs, or not

2015-05-21 Thread Gervase Markham
On 19/05/15 13:14, Kurt Roeckx wrote: On 2015-05-14 17:25, Gervase Markham wrote: CAs currently in Mozilla's program which may fit one or more definitions of government CA are: It might be a little out of scope of your question, but maybe we should agree on what we think the (government)