My apologies, Robin, and I did indeed misidentify the company involved.
I was looking at the DigiNotar timeline and my brain crosswired the two.
I truly am sorry. :(  (FYI,
http://www.networking4all.com/en/ssl+certificates/ssl+news/time-
line+for+the+diginotar+hack/ )

However, the remainder of my comment stands.  Is it time for Mozilla to
implement a cross-certifier?  Would NSS and PSM (once the appropriate
fixes are made to make libpkix the default) be able to effectively
handle revocation for such?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/310999

Title:
  comodo seen issuing certificates unwisely

To manage notifications about this bug go to:
https://bugs.launchpad.net/nss/+bug/310999/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to