Re: CA generated keys

2017-12-10 Thread Gervase Markham via dev-security-policy
Hi Tim, The more I think about it, the more I see this is actually a interesting question :-) I suspect the first thing Mozilla allowing this would do would be to make it much more common. (Let's assume there are no other policy barriers.) I suspect there are several simpler workflows for

Re: ComSign Root Renewal Request

2017-12-10 Thread YairE via dev-security-policy
Thank you for your notes, Here are the answers to your points. all the "bad" points about the CPS were addressed: Both CPS's are now changed to ver 4.1 section 1 states that we are addressing the latest BR 3.2.2.4 was corrected i'm also attaching the new CPS'es so you can review them About the

Re: ComSign Root Renewal Request

2017-12-10 Thread YairE via dev-security-policy
Thank you for your notes, Here are the answers to your points. all the "bad" points about the CPS were addressed: Both CPS'es are changed to ver 4.1 section 1 states that we are addressing the *latest* BR 3.2.2.4 was corrected the CPS'es in our site has been updated I’m attaching the new CPS'es