Include Additional D-TRUST root certificate

2016-12-21 Thread Kathleen Wilson
This request from D-TRUST is to included the ‘D-TRUST Root CA 3 2013’ root certificate and enable the Email trust bit. D-TRUST GmbH is a subsidiary of Bundesdruckerei GmbH and is fully owned by the German State. D-TRUST currently has two root certificates included in Mozilla’s program. The

Re: Policy 2.4 Proposal: Require open licensing of CPs and CPSes

2016-12-21 Thread Eric Mill
It's not a big deal. The important part is that there's flexibility for entities in novel legal situations to meet the intent of the policy, which this does. On Wed, Dec 21, 2016 at 12:38 AM, Jakob Bohm wrote: > On 16/12/2016 16:10, Gervase Markham wrote: > >> On 14/12/16

Re: wosign and letsencrypt.cn / letsencrypt.com.cn

2016-12-21 Thread tdelmas
On Monday, December 19, 2016 at 2:45:16 AM UTC+1, Richard Wang wrote: > I wish everyone can talk about this case friendly and equally. I'm sorry about the wosing-bashing that followed. It wasn't my intention. > We know Let's Encrypt is released after the public announcement, but two day >

Re: SHA-1 exception First Data

2016-12-21 Thread Gervase Markham
On 16/12/16 17:55, Nick Lamb wrote: > So here we are, three months later, First Data are back, as predicted, asking > for another "exception". Those reading the CAB Forum list will note that Mozilla has declined to grant an additional exception. Gerv

Re: Policy 2.4 Proposal: Require open licensing of CPs and CPSes

2016-12-21 Thread Gervase Markham
On 21/12/16 05:38, Jakob Bohm wrote: >> I'm not sure what you are getting at; m.d.s.p is "in writing", as is "in >> Bugzilla". I say "in writing" because I want to make sure some CA >> doesn't come back with "you said it was OK when we chatted at CAB >> Forum", or "you implied it was OK by