Re: Can we require id-kp-serverAuth now?

2016-12-06 Thread Rob Stradling
On 05/12/16 22:43, Brian Smith wrote: That's true, but at the same time we want to have standardized behavior right? Mozilla is or will be asking people to go beyond existing standards by: 1. Honoring Microsoft's semantics for EKU in intermediates. 2. Dropping support for interpreting the

Re: Taiwan GRCA Root Renewal Request

2016-12-06 Thread Wen-Cheng Wang
Hi Jacob, I think you get confused by My colleague Li-Chun's email because he mentioned a lot about using self-issued certificates for key-rollover, AIA certificate chaining support, and the bug of Microsoft IIS (note: not IE browser) in handling self-issued certificates. All these are