> Does WebTrust periodically re-evaluate CAs?

Yes -- the WebTrust program requires seal holders to undergo an annual
update to maintain their seal and report.  This annual update would likely
entail additional vigilence by the auditors after a change in control of the
CA.

For example, the GTE Cybertrust root was bought by Baltimore and then
Betrusted;  it was also moved from a hosting site in MA to MD.  The changes
in business use and environment are both meaningful from the audit
perspective.


_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to