Frank Hecker wrote: > Yes, as noted in the bug KISA/KCAC doesn't issue end entity certificates > directly, but has subordinate CAs which do so. (As you note, this is a > common setup in many countries.) That's why Gerv and I invested a fair > amount of effort trying to determine what these subordinate CAs actually do. > > Yes, this bug has a long history already and I have the intentions to go quickly through the major documents and hopefully find nothing exceptional. Still, the statement of the auditor is not really satisfactory...
-- Regards Signer: Eddy Nigg, StartCom Ltd. <http://www.startcom.org> Jabber: [EMAIL PROTECTED] <xmpp:[EMAIL PROTECTED]> Blog: Join the Revolution! <http://blog.startcom.org> Phone: +1.213.341.0390 _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto