Re: Revocation as an independent user agent decision

2020-03-28 Thread Ryan Sleevi via dev-security-policy
On Sat, Mar 28, 2020 at 6:39 PM Ian Carroll via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Hi Ryan, > > I don't see a reason why any obligation in 9.6.3 is not fulfillable by > changing the obligation from a subscriber's notification to revoke to the > CA, to an

Re: Revocation as an independent user agent decision

2020-03-28 Thread Ian Carroll via dev-security-policy
On Thursday, March 26, 2020 at 2:23:11 PM UTC-7, Ryan Sleevi wrote: > On Thu, Mar 26, 2020 at 4:45 PM Ian Carroll via dev-security-policy > wrote: > > > > Hi all, > > > > A recent thread on CAs using contractual terms to revoke certificates has > > made me want to bring up a topic that I am

Re: Revocation as an independent user agent decision

2020-03-26 Thread Ryan Sleevi via dev-security-policy
On Thu, Mar 26, 2020 at 4:45 PM Ian Carroll via dev-security-policy wrote: > > Hi all, > > A recent thread on CAs using contractual terms to revoke certificates has > made me want to bring up a topic that I am surprised does not come up more: > removing the control of revocation from CAs and