Re: Comments and discussion on code signing certs

2015-02-26 Thread Dean Coclin
 FYI-The Forum never received these comments. Did you send them to the questi...@cabforum.org list?  However, we will add them to our comments log for tracking. Thank you for the comments.Dean CoclinCA/B Forum Chair  On 02/26/15, Peter Kurrasch wrote: ‎As suggested by others, I submitted comments t

Re: LuxTrust Root Inclusion Request

2015-02-26 Thread Jesus F
After some quick test of the OCSP Service I detect the following issues related to the conformity with CA/Browser Forum Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates (hereinafter BR) as required by section 12 of Mozilla CA Certificate Inclusion Policy v2.

Re: Tightening up after the Lenovo and Comodo MITM certificates.

2015-02-26 Thread Elbart
On 24.02.2015 13:10, Juergen Christoffel wrote: On 23.02.15 22:39, John Nagle wrote: With the Lenovo and Comodo disclosures, the restrictions on loading new certificates into Firefox clients need to be tightened. The MITM-Ad/Malware installed via the Windows Certificate Store and not into

Comments and discussion on code signing certs

2015-02-26 Thread Peter Kurrasch
‎As suggested by others, I submitted comments to CABF questions email address regarding the code signing cert requirements. I'm including them below in the event there is any interest in the wider Mozilla community in discussing the issues further in a public forum. Thanks.  == Submitted

Re: LuxTrust Root Inclusion Request

2015-02-26 Thread LuxTrust CA
For clarification purposes and as described in the bug report 1060863 (see https://bugzilla.mozilla.org/show_bug.cgi?id=1060863), LuxTrust would like to mention that the Root CA for which inclusion in Mozilla’s trust store is requested is LuxTrust Global Root CA. The topics raised by David Keele

Re: LuxTrust Root Inclusion Request

2015-02-26 Thread LuxTrust CA
For clarification purposes and as described in the bug report 1060863 (see https://bugzilla.mozilla.org/show_bug.cgi?id=1060863), LuxTrust would like to mention that the Root CA for which inclusion in Mozilla’s trust store is requested is LuxTrust Global Root CA. The topics raised by David Keele

Re: Tightening up after the Lenovo and Comodo MITM certificates.

2015-02-26 Thread Hanno Böck
On Wed, 25 Feb 2015 09:26:57 + Gervase Markham wrote: > That's a pretty major conclusion to reach on pretty shaky evidence. > Have you actually tested a version of PrivDog _as shipped by Comodo_ > and detected this problem? As I've been the one finding these issues I think I can give some fa