On Sat, Dec 29, 2018 at 06:26:09PM -0500, Lee via dev-security-policy wrote: > On 12/29/18, Ryan Sleevi <r...@sleevi.com> wrote: > > On Sat, Dec 29, 2018 at 10:24 AM Lee <ler...@gmail.com> wrote: > > > >> > It does not seem like a productive discussion will emerge if the > >> > ontology > >> > is going to be honest/dishonest participants. > >> > >> I think it's an excellent distinction. An honest subscriber won't > >> deliberately attempt to spread malware. But I like the idea of CAs > >> revoking certs for sites deliberately trying to do harm.. even tho I > >> get the impression that few actually revoke certs for that reason. > > > > It's not, because it presumes to know the ineffable in order to make a > > judgement. > > You've made your opinion clear in the past. You're not going to > change my mind, I'm not going to change yours, so let's not waste our > time talking past each other. OK?
You were the one who brought it up, and it's such a terrible idea that it really does need to be addressed each time, lest new participants here get the impression that somehow it isn't all that bad. - Matt _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy