I've updated the root CA certificate "pending" and "included" lists to 
reflect all the new roots that got approved in time for Firefox 3 RC1:

   http://www.mozilla.org/projects/security/certs/pending/
   http://www.mozilla.org/projects/security/certs/included/

Some additional comments in relation to this:

* As Kathleen gathers more information about the pending requests I'll 
start adding more CA entries to the pending list.

* I'm thinking about writing a script to take the certdata.txt file and 
generate a minimal set of entries for the included list for all the 
legacy roots. I don't know when I'll have time to do this, so if someone 
else wants to try writing such a script I'd certainly appreciate it.

* I'm thinking of making minor tweaks to the format of the entries. In 
particular right now the entries have a single place for the 
"authorisation" bug report, and a single place for the "inclusion" bug 
report. However with EV things are more complex: We have the possibility 
of having a bug requesting an upgrade of an existing root to EV, and a 
separate bug to make the EV change in PSM. So I'll likely change the 
entries to allow for the possibility of two additional bug types.

Frank

-- 
Frank Hecker
[EMAIL PROTECTED]
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to