Re: CA disclosure of revocations that exceed 5 days [Was: Re: Incident report D-TRUST: syntax error in one tls certificate]

2018-11-30 Thread Ryan Sleevi via dev-security-policy
On Fri, Nov 30, 2018 at 4:24 AM Dimitris Zacharopoulos wrote: > > > On 30/11/2018 1:49 π.μ., Ryan Sleevi wrote: > > > > On Thu, Nov 29, 2018 at 4:03 PM Dimitris Zacharopoulos via > dev-security-policy wrote: > >> I didn't want to hijack the thread so here's a new one. >> >> >> Times and

Re: Incident report D-TRUST: syntax error in one tls certificate

2018-11-30 Thread Nick Lamb via dev-security-policy
On Wed, 28 Nov 2018 22:41:37 +0100 Jakob Bohm via dev-security-policy wrote: > I blame those standards for forcing every site to choose between two > unfortunate risks, in this case either the risks prevented by those > "pinning" mechanisms and the risks associated with having only one >

Re: WISeKey - Request to transfer Root ownership to the OISTE Foundation

2018-11-30 Thread Pedro Fuentes via dev-security-policy
Hi Wayne, thanks for your prompt reaction. I insert my comments below. El jueves, 29 de noviembre de 2018, 19:01:16 (UTC+1), Wayne Thayer escribió: > Questions for OISTE/WISeKey: > > Your plans for new audits will largely cover the requirement that OISTE > demonstrate compliance with the

Re: CA disclosure of revocations that exceed 5 days [Was: Re: Incident report D-TRUST: syntax error in one tls certificate]

2018-11-30 Thread Dimitris Zacharopoulos via dev-security-policy
On 30/11/2018 1:49 π.μ., Ryan Sleevi wrote: On Thu, Nov 29, 2018 at 4:03 PM Dimitris Zacharopoulos via dev-security-policy > wrote: I didn't want to hijack the thread so here's a new one. Times and circumstances change. You have to