Re: [Discuss] root CA bloat

2014-11-21 Thread Richard Pieri
On 11/21/2014 6:19 PM, Tom Metro wrote: Has anyone created an extension for Firefox that trims down the cert list to something like the top 50 cert providers? Who's to say what those top 50 are? And in fact, pruning to the top 50 would only remove about a dozen of the top level certificate aut

Re: [Discuss] root CA bloat

2014-11-21 Thread Tom Metro
Edward Ned Harvey (blu) wrote: > Look at the list of CA's on Mozilla's list, and look at their process > for accepting CA's (and read that link about Honest Achmed, which is > hilarious https://bugzilla.mozilla.org/show_bug.cgi?id=647959 ) Heh. It's a joke application to add a root certificate for

Re: [Discuss] free SSL certs from the EFF

2014-11-21 Thread Derek Atkins
"Edward Ned Harvey (blu)" writes: >> From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- >> bounces+blu=nedharvey@blu.org] On Behalf Of Tom Metro >> >> We sort of already have this today with StartCom (StartSSL), but they >> have limitations on their free offering. No wildcard c