Eddy Nigg (StartCom Ltd.) wrote:
> Or I could simply push the "Backup" button of the certificate viewer? 
> Except that in this very specific case, the copyright of the different 
> CA certificates are perhaps that of the CAs themselves. However 
> distribution of the CA root is many times part of the CP/CPS of the 
> various CAs and most of the time encouraged (The relying party should be 
> able to verify the signer and CRLs etc)?

I'm afraid I don't understand this question, if it is a question.

>> What's the problem with being bound to the tri-licence anyway? "Choose 
>> the MPL", and then the licensing conditions don't affect any of the 
>> rest of your code. certdata.txt is a self-contained file.
> Right, the problem is, that some projects use different licenses then 
> one of the three, making it under certain circumstances incompatible. 
> However since the content or extraction of the certdata.txt file can be 
> loaded at run-time as opposed at compile time, this problem could be 
> solved that way easily.

Actually, apparently I was wrong about that. certdata.txt is compiled.

Gerv
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to