Re: WoSign and StartCom: next steps

2016-10-09 Thread Eddy Nigg
On 10/07/2016 12:38 PM, Gervase Markham wrote: I am a little surprised it hasn't appeared by now. We did not agree a specific deadline, but my impression was that it would appear in a few days, which I mentally interpreted as "by the end of the week". Today is Friday, so there is still time for

RE: WoSign and StartCom: next steps

2016-10-07 Thread Richard Wang
Of Gervase Markham Sent: Wednesday, October 5, 2016 12:25 AM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: Re: WoSign and StartCom: next steps On 29/09/16 16:40, Gervase Markham wrote: > Following the publication of the recent investigative report, > representatives of Qih

Re: WoSign and StartCom: next steps

2016-10-07 Thread Gervase Markham
On 06/10/16 20:38, Ryan Sleevi wrote: > Do you have any further updates regarding this plan? This seems to > have stalled any further discussions about next steps. I am a little surprised it hasn't appeared by now. We did not agree a specific deadline, but my impression was that it would appear

Re: WoSign and StartCom: next steps

2016-10-06 Thread Ryan Sleevi
On Tuesday, October 4, 2016 at 9:25:16 AM UTC-7, Gervase Markham wrote: > On 29/09/16 16:40, Gervase Markham wrote: > > Following the publication of the recent investigative report, > > representatives of Qihoo 360 and StartCom have requested a face-to-face > > meeting with Mozilla. We have

Re: WoSign and StartCom: next steps

2016-10-04 Thread Gervase Markham
On 29/09/16 16:40, Gervase Markham wrote: > Following the publication of the recent investigative report, > representatives of Qihoo 360 and StartCom have requested a face-to-face > meeting with Mozilla. We have accepted, and that meeting will take place > next Tuesday in London. This meeting

Re: WoSign and StartCom: next steps

2016-10-03 Thread Gervase Markham
On 30/09/16 12:23, Gervase Markham wrote: > We don't plan to make a video or release a transcript, but Mozilla will > also not be finalising any plans for action at the meeting either. From > our perspective, the aim is to discuss whatever plans > Qihoo/StartCom/WoSign have to improve the

Re: WoSign and StartCom: next steps

2016-09-30 Thread Florian Weimer
* Hanno Böck: > Minor sidenote: there have been some concerns about TLS security > vulnerabilities of the qihoo 360 browser [1] [2]. While this is not > directly related to the operation of a CA, it surely would increase the > community's trust of qihoo 360 if these issues get resolved quickly. >

Re: WoSign and StartCom: next steps

2016-09-30 Thread Hanno Böck
Hi, I just want to throw out some thoughts and I hope the people involved find it noteworthy. Please note that I am in no way in a position to decide anything here, I'm just someone who happens to have an opinion on the stuff going on. This seems to be some last minute attempt to rescue

Re: WoSign and StartCom: next steps

2016-09-30 Thread Gervase Markham
On 29/09/16 18:12, Han Yuwei wrote: > Could you disclosure what would you talk about or would be determined > on the meeting? And would there be a video or transcript about your > meeting? We don't plan to make a video or release a transcript, but Mozilla will also not be finalising any plans for

Re: WoSign and StartCom: next steps

2016-09-30 Thread Gervase Markham
On 30/09/16 03:14, 谭晓生 wrote: > So far 360 is just an investor of Wosign, but we think we need to do > something because of what happened. > I’d like to have suggestions from Gev to see if Richard Wang to join the > meeting is a better proposal. Hi Xiaosheng, I think it is a decision for Qihoo

Re: WoSign and StartCom: next steps

2016-09-29 Thread 谭晓生
I'm trying not to get too far ahead of things, but this seems to be a very curious turn of events. Original Message From: Gervase Markham Sent: Thursday, September 29, 2016 10:41 AM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: WoSign and StartCom

Re: WoSign and StartCom: next steps

2016-09-29 Thread Vincent Lynch
o far ahead of things, but this seems to be a very > curious turn of events. > > > Original Message > From: Gervase Markham > Sent: Thursday, September 29, 2016 10:41 AM > To: mozilla-dev-security-pol...@lists.mozilla.org > Subject: WoSign and StartCom: next steps > > Hi ev

Re: WoSign and StartCom: next steps

2016-09-29 Thread Peter Kurrasch
.   Original Message   From: Gervase Markham Sent: Thursday, September 29, 2016 10:41 AM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: WoSign and StartCom: next steps Hi everyone, Following the publication of the recent investigative report, representatives of Qihoo 360 and StartCom have

Re: WoSign and StartCom: next steps

2016-09-29 Thread Percy
On Thursday, September 29, 2016 at 10:12:37 AM UTC-7, Han Yuwei wrote: > 在 2016年9月29日星期四 UTC+8下午11:41:12,Gervase Markham写道: > > Hi everyone, > > > > Following the publication of the recent investigative report, > > representatives of Qihoo 360 and StartCom have requested a face-to-face > >

Re: WoSign and StartCom: next steps

2016-09-29 Thread Han Yuwei
在 2016年9月29日星期四 UTC+8下午11:41:12,Gervase Markham写道: > Hi everyone, > > Following the publication of the recent investigative report, > representatives of Qihoo 360 and StartCom have requested a face-to-face > meeting with Mozilla. We have accepted, and that meeting will take place > next Tuesday

WoSign and StartCom: next steps

2016-09-29 Thread Gervase Markham
Hi everyone, Following the publication of the recent investigative report, representatives of Qihoo 360 and StartCom have requested a face-to-face meeting with Mozilla. We have accepted, and that meeting will take place next Tuesday in London. After that, we expect to see a public response and