Eddy Nigg (StartCom Ltd.) wrote:
> Also many times there are some umbrella CAs setup to support those 
> regulations and by including them, it will include automatically a bunch 
> of other CAs as well. I believe KISA is such a CA...??

Yes, as noted in the bug KISA/KCAC doesn't issue end entity certificates 
directly, but has subordinate CAs which do so. (As you note, this is a 
common setup in many countries.) That's why Gerv and I invested a fair 
amount of effort trying to determine what these subordinate CAs actually do.

Frank

-- 
Frank Hecker
[EMAIL PROTECTED]
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to