Re: HARICA Root Renewal Request

2016-03-24 Thread Kathleen Wilson
On Monday, March 7, 2016 at 12:51:14 PM UTC-8, Kathleen Wilson wrote: > > The action item to update the CP/CPS will be tracked in the bug, in parallel > with the rest of the inclusion process. > The updated CP/CPS (version 3.3) has been posted on HARICA's website: http://www.harica.gr/documents

Re: HARICA Root Renewal Request

2016-03-07 Thread kwilson
On Wednesday, March 2, 2016 at 5:11:43 PM UTC-8, Kathleen Wilson wrote: > > To summarize this discussion: > > 1) HARICA plans to update their CP/CPS in May-June of this year, and > incorporate the updates that they indicated in this discussion. I plan > to track that action item in parallel of

Re: HARICA Root Renewal Request

2016-03-02 Thread Kathleen Wilson
On 2/2/16 2:46 PM, Kathleen Wilson wrote: All, Many thanks to those of you who reviewed and commented on this request to include the "Hellenic Academic and Research Institutions RootCA 2015" and "Hellenic Academic and Research Institutions ECC RootCA 2015" root certificates, and enable the Websi

Re: HARICA Root Renewal Request

2016-02-23 Thread Dimitris Zacharopoulos
On 22/2/2016 6:52 μμ, Peter Kurrasch wrote: Hi Dimitris, ‎You certainly echo the sentiment of others in this forum by directing me to the CABF but my concerns are particular to HARICA at this point. Simply put, the CABF BR has security gaps in section 3.2.2.4 which can result in certificate m

Re: HARICA Root Renewal Request

2016-02-22 Thread Peter Kurrasch
Hi Dimitris, ‎You certainly echo the sentiment of others in this forum by directing me to the CABF but my concerns are particular to HARICA at this point. Simply put, the CABF BR has security gaps in section 3.2.2

Re: HARICA Root Renewal Request

2016-02-22 Thread Dimitris Zacharopoulos
Hello Peter, Please find our answers below the "PK" paragraphs. On 19/2/2016 4:00 μμ, Peter Kurrasch wrote: Hi Dimitris, My apologies for taking so long to get back to you with some of the more technical comments I have regarding the HARICA CPS. I've extracted a few of the issues and inclu

Re: HARICA Root Renewal Request

2016-02-02 Thread Kathleen Wilson
On 2/2/16 1:31 PM, Dimitris Zacharopoulos wrote: On 1/2/2016 9:59 μμ, Peter Kurrasch wrote: Thank you, Dimitris, for your helpful response! I appreciate the clarifications you provided. I do like that there are fairly tight controls in place as I think it will serve everyone (both HARICA CA subs

Re: HARICA Root Renewal Request

2016-02-02 Thread Dimitris Zacharopoulos
On 1/2/2016 9:59 μμ, Peter Kurrasch wrote: Thank you, Dimitris, for your helpful response! I appreciate the clarifications you provided. I do like that there are fairly tight controls in place as I think it will serve everyone (both HARICA CA subscribers and the wider Internet population) well.

Re: HARICA Root Renewal Request

2016-02-01 Thread Peter Kurrasch
Thank you, Dimitris, for your helpful response! I appreciate the clarifications you provided. I do like that there are fairly tight controls in place as I think it will serve everyone (both HARICA CA subscribers a

Re: HARICA Root Renewal Request

2016-01-26 Thread Dimitris Zacharopoulos
Hello Peter and thank you for reviewing this request. I hope you have reviewed the DRAFT CP/CPS available from the bug 1201423 since we have done some changes after the original bug

Re: HARICA Root Renewal Request

2016-01-25 Thread Peter Kurrasch
I've reviewed the CPS/CP and in general I like it but I do have some concerns. My frame of reference is two-fold: First, how large is the attack surface through which I as a bad guy might obtain a cert to use for

Re: HARICA Root Renewal Request

2016-01-20 Thread Kathleen Wilson
On 12/10/15 3:29 PM, Kathleen Wilson wrote: This request is to include the “Hellenic Academic and Research Institutions RootCA 2015” and “Hellenic Academic and Research Institutions ECC RootCA 2015” root certificates, and enable the Websites and Email trust bits for both roots. Hellenic Academic

Re: HARICA Root Renewal Request

2015-12-14 Thread Dimitris Zacharopoulos
On 11/12/2015 12:55 μμ, Dimitris Zacharopoulos wrote: On 11/12/2015 1:29 πμ, Kathleen Wilson wrote: This request is to include the “Hellenic Academic and Research Institutions RootCA 2015” and “Hellenic Academic and Research Institutions ECC RootCA 2015” root certificates, and enable the Websit

Re: HARICA Root Renewal Request

2015-12-11 Thread Dimitris Zacharopoulos
On 11/12/2015 1:29 πμ, Kathleen Wilson wrote: This request is to include the “Hellenic Academic and Research Institutions RootCA 2015” and “Hellenic Academic and Research Institutions ECC RootCA 2015” root certificates, and enable the Websites and Email trust bits for both roots. Hellenic Acad

HARICA Root Renewal Request

2015-12-10 Thread Kathleen Wilson
This request is to include the “Hellenic Academic and Research Institutions RootCA 2015” and “Hellenic Academic and Research Institutions ECC RootCA 2015” root certificates, and enable the Websites and Email trust bits for both roots. Hellenic Academic and Research Institutions Certification Au