On Fri, Jun 2, 2017 at 8:50 AM, Gervase Markham via dev-security-policy <dev-security-policy@lists.mozilla.org> wrote: > On 02/06/17 12:24, Kurt Roeckx wrote: >> Should that be "all certificates" instead of "all SSL certificates"? > > No; the Baseline Requirements apply only to SSL certificates.
Should Mozilla include a clear definition of "SSL certificates" in the policy? And should it be based on technical attributes rather than intent of the issuer? Thanks, Peter _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy