RE: Possible future re-application from WoSign (now WoTrus)

2017-11-28 Thread Danny 吴熠 via dev-security-policy
Hi Peter, I am working for WoTrus as a Compliance Coordinator in the Risk Control & Compliance Department and I am the representative of WoTrus for communication in the community. Best regards, Danny -Original Message- From: dev-security-policy

Re: Swiss Government root inclusion request

2017-11-28 Thread Wayne Thayer via dev-security-policy
On Thursday, November 23, 2017 at 4:03:27 AM UTC-7, michael.vonn...@bit.admin.ch wrote: > Hi Matt > > Thank you for your statement. > > Let me try to clarify: > > In 3.2.2.4 we specify the Authorization by Domain Name Registrant as follows: > > 3.2.2.4 Authorization by Domain Name Registrant

Re: Mozilla RSA-PSS policy

2017-11-28 Thread Ryan Sleevi via dev-security-policy
On Tue, Nov 28, 2017 at 8:04 AM, Hubert Kario wrote: > On Monday, 27 November 2017 23:37:59 CET Ryan Sleevi wrote: > > On Mon, Nov 27, 2017 at 4:51 PM, Hubert Kario wrote: > > > > So no, we should not assume well-meaning actors, and we should be > > > > > >

Re: Possible future re-application from WoSign (now WoTrus)

2017-11-28 Thread Peter Kurrasch via dev-security-policy
Danny, can you please clarify your role? Are you a WoTrus employee and are you speaking on behalf of Richard Wang? Thanks.   Original Message   From: Danny 吴熠 via dev-security-policy Sent: Monday, November 27, 2017 2:39 AM‎ Dear Gerv, Kethleen, other community friends, First, thanks for Gerv

Re: Question on CAA processing for mixed wildcard and non-wildcard SAN DNS names

2017-11-28 Thread Jakob Bohm via dev-security-policy
On 28/11/2017 15:53, Nick Lamb wrote: On Tue, 28 Nov 2017 04:26:30 +0100 Jakob Bohm via dev-security-policy wrote: Nick Lamb, in the message I replied to, clearly suggested as much, and provided a contrived scenario to "prove" that point. That's true,

Re: Welcome Wayne Thayer to Mozilla!

2017-11-28 Thread Don Sheehy via dev-security-policy
that is great On Tue, Nov 28, 2017 at 2:03 AM, Ryan Hurst via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > That is great! > > On Monday, November 27, 2017 at 4:04:09 PM UTC-8, Kathleen Wilson wrote: > > All, > > > > I am pleased to announce that Wayne Thayer is now a

Re: Question on CAA processing for mixed wildcard and non-wildcard SAN DNS names

2017-11-28 Thread Nick Lamb via dev-security-policy
On Tue, 28 Nov 2017 04:26:30 +0100 Jakob Bohm via dev-security-policy wrote: > Nick Lamb, in the message I replied to, clearly suggested as much, and > provided a contrived scenario to "prove" that point. That's true, and I apologise if the effect was to

Re: Possible future re-application from WoSign (now WoTrus)

2017-11-28 Thread Matthew Hardeman via dev-security-policy
On Mon, Nov 27, 2017 at 3:07 PM, adisor19--- via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > > After seeing the forced shutdown of StartCom, I see no reason to allow > them back in. Richard Wang is back in his role as CEO and everything is > back to square one except all

Re: Mozilla RSA-PSS policy

2017-11-28 Thread Hubert Kario via dev-security-policy
On Monday, 27 November 2017 23:37:59 CET Ryan Sleevi wrote: > On Mon, Nov 27, 2017 at 4:51 PM, Hubert Kario wrote: > > > So no, we should not assume well-meaning actors, and we should be > > > > explicit > > > > > about what the "intention" of the RFCs is, and whether they

Re: Firefox Mobile - Which Trust Store?

2017-11-28 Thread Gervase Markham via dev-security-policy
On 27/11/17 19:50, Myers, Kenneth (10421) wrote: > Does Firefox mobile use the NSS trust store? Yes, on Android. It uses the OS trust store on iOS. Gerv ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org

Re: Possible future re-application from WoSign (now WoTrus)

2017-11-28 Thread adisor19--- via dev-security-policy
On Wednesday, November 22, 2017 at 4:06:26 AM UTC-5, Gervase Markham wrote: > We understand that WoTrus (WoSign changed their name some months ago) > are working towards a re-application to join the Mozilla Root Program. > Richard Wang recently asked us to approve a particular auditor as being >