Re: Allow Redaction of issues detailed in BR Audit statements?

2014-08-27 Thread Jean-Marc Desperrier
David E. Ross a écrit : With a redacted audit report, the presumption should be that hidden negative information exists that would disqualify the certification authority from having its root certificate in the NSS database if such information were disclosed. any redaction would imply the

Re: Allow Redaction of issues detailed in BR Audit statements?

2014-08-27 Thread David E. Ross
On 8/27/2014 7:11 AM, Jean-Marc Desperrier wrote: David E. Ross a écrit : With a redacted audit report, the presumption should be that hidden negative information exists that would disqualify the certification authority from having its root certificate in the NSS database if such information

Re: Allow Redaction of issues detailed in BR Audit statements?

2014-08-27 Thread Kathleen Wilson
On 8/27/14, 7:11 AM, Jean-Marc Desperrier wrote: David E. Ross a écrit : With a redacted audit report, the presumption should be that hidden negative information exists that would disqualify the certification authority from having its root certificate in the NSS database if such information

Re: Allow Redaction of issues detailed in BR Audit statements?

2014-08-27 Thread Matt Palmer
On Thu, Aug 28, 2014 at 09:42:13AM +0800, Man Ho (Certizen) wrote: Concerning about a list of BRs that the CA is still working to conform with, I don't think CAs will agree to publish in public for security reason and also because of business sensitivity. I think some CAs don't even want to