Re: What does "No Stipulation" mean, and when is it OK to use it in CP/CPS?

2018-10-26 Thread Wayne Thayer via dev-security-policy
On Thu, Oct 25, 2018 at 10:11 PM Jakob Bohm via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On 26/10/2018 01:13, Ryan Sleevi wrote: > > On Thu, Oct 25, 2018 at 5:47 PM Jakob Bohm via dev-security-policy < > > dev-security-policy@lists.mozilla.org> wrote: > > > >> On 25/10

Re: Incorrect qcStatements encoding at a number of Qualified Web Authentication Certificates (QWACs)

2018-10-26 Thread Ryan Sleevi via dev-security-policy
I've reached to the auditor (in this case, TUVIT) to understand why they failed to detect this major non-conformity. Now that I'm back in the states, following the CA/Browser Forum F2F, I've had a chance to look more closely at the set of CAs that have issued. This is not a full lint check - I've