Re: StartCom CA inclusion request

2006-05-19 Thread Frank Hecker
Frank Hecker wrote: I'm finally getting back to working on requests for CA for their root certificates to be included in NSS/Mozilla. (Yes, I suck for leaving this undone for so long; my apologies.) The first one I'm working on is for StartCom Ltd., bug 289077:

Re: StartCom CA inclusion request

2006-05-19 Thread Frank Hecker
Frank Hecker wrote: I'm finally getting back to working on requests for CA for their root certificates to be included in NSS/Mozilla. (Yes, I suck for leaving this undone for so long; my apologies.) The first one I'm working on is for StartCom Ltd., bug 289077:

Re: StartCom CA inclusion request

2006-05-03 Thread christian . barmala
Hi David, David E. Ross wrote: ... my checklist for CA audit Is it published somewhere? It might be very interesting. No, it is not published. It is copyrighted. I see, since, this document is not part of the Mozilla CA certificate Policy or the decision process, there is no need to publish

Re: StartCom CA inclusion request

2006-05-02 Thread christian . barmala
Hi, On Mon, 01 May 2006 16:17:58 -0700 David E. Ross wrote: ... I would not trust any Class 1 subscriber certificate ... On Mon, 01 May 2006 20:24:40 -0400 Frank Hecker wrote: ...Whether one agrees that it's sufficient or not, class 1 certificates ... As you'll recall,... the ultimate result

Re: StartCom CA inclusion request

2006-05-02 Thread christian . barmala
Hi David, On Mon, 01 May 2006 16:17:58 -0700 David E. Ross wrote: Note that my checklist for CA audit (originally developed for reviewing CACert, another free certificate authority) specifies Is it published somewhere? I couldn't find it by searching the Web. It might be very interesting.

Re: StartCom CA inclusion request

2006-05-02 Thread David E. Ross
[EMAIL PROTECTED] wrote: Hi David, On Mon, 01 May 2006 16:17:58 -0700 David E. Ross wrote: Note that my checklist for CA audit (originally developed for reviewing CACert, another free certificate authority) specifies Is it published somewhere? I couldn't find it by searching the Web. It

Re: StartCom CA inclusion request

2006-05-01 Thread David E. Ross
Frank Hecker wrote: I'm finally getting back to working on requests for CA for their root certificates to be included in NSS/Mozilla. (Yes, I suck for leaving this undone for so long; my apologies.) The first one I'm working on is for StartCom Ltd., bug 289077:

Re: StartCom CA inclusion request

2006-05-01 Thread Kyle Hamilton
On 1 May 2006 19:07:58 -0700, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: My intent was to address identifying the persons who are subscribers, well beyond merely verifying Web domains and E-mail addresses. According to the StartCom CP (Sect. 11.III.A), that level of verification is not done

StartCom CA inclusion request

2006-04-30 Thread Frank Hecker
I'm finally getting back to working on requests for CA for their root certificates to be included in NSS/Mozilla. (Yes, I suck for leaving this undone for so long; my apologies.) The first one I'm working on is for StartCom Ltd., bug 289077: