Re: NSS Trust Bits for AOL root cert?

2014-10-28 Thread Kathleen Wilson
On 10/27/14, 2:05 PM, Kathleen Wilson wrote: On 10/24/14, 4:24 PM, Daniel Roesler wrote: Howdy all, I'm trying to understand the trust flags in the root CA list[1]. According to Bug #605187[2] , the AOL root cert[3] should be removed. However, it is still in the list and all the flags on it

Re: NSS Trust Bits for AOL root cert?

2014-10-28 Thread diafygi
Ok, thanks for the clarification. I was wondering why https://pki-info.aol.com/ had stopped responding. It's sad to see them go. I was hoping they would start issuing free SSL certs with them or donate them to someone (Mozilla?) who would start issuing free SSL certs. We desperately need some

Re: NSS Trust Bits for AOL root cert?

2014-10-28 Thread Daniel Roesler
Ok, thanks for the clarification. I was wondering why https://pki-info.aol.com/ had stopped responding. It's sad to see them go. I was hoping they would start issuing free SSL certs with them or donate them to someone (Mozilla?) who would start issuing free SSL certs. We desperately need some

Re: Organization info in certs not being properly recognized byFirefox

2014-10-28 Thread fhw843
‎It's debatable if those are actually facts but perhaps some perspective will help the conversation. I'll use this case as a launching point:* Users are, quite reasonably, focused on the viewport. After all, that's where the content is and where the task is. Many people simply never see the

Re: Cert spam, or certs with huge numbers of hosts.

2014-10-28 Thread John Nagle
On 10/23/2014 02:00 PM, Richard Barnes wrote: illa and the CA/Browser Forum. And I suspect it is related to this: http://blog.cloudflare.com/introducing-universal-ssl/ I previously wrote You're probably right. He was. As of the January 2014 U. Mich scan of IPv4 space: Number of IPv4