Re: Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

2024-05-03 Thread Wayne
Hi Andrew, I was looking at https://globaltrust.eu/certificate-policy/ and the 'GLOBALTRUST 2015 SERVER OV 2' entry which includes a list of test servers. I can see there is a different list of test servers listed higher on the page, and 2020 functions correctly, but 2015 has the same issue

Re: Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

2024-05-03 Thread Andrew Ayer
Hi Wayne, On Fri, 3 May 2024 04:29:15 -0700 (PDT) Wayne wrote: > They don't list valid/expired/revoked domains for all of their > sub-CAs CAs are only required to provide one set of test websites per root, not for every sub-CA. > and even the ones they do are running on the same wildcard >

Re: Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

2024-05-03 Thread Wayne
Thanks for the clarification Rob. Looking at their page layout and their opting to do so convinced me of that, but I should have checked the BR specifically. - Wayne On Friday, May 3, 2024 at 1:47:52 PM UTC+1 Rob Stradling wrote: > Hi Wayne. On this particular point... > > > They don't list

Re: Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

2024-05-03 Thread 'Rob Stradling' via dev-security-policy@mozilla.org
Hi Wayne. On this particular point... > They don't list valid/expired/revoked domains for all of their sub-CAs Please note that the requirement in BR section 2.2 is as follows (emphasis mine): "The CA SHALL host test Web pages that allow Application Software Suppliers to test their software

Re: Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

2024-05-03 Thread Wayne
Having glanced at e-commerce monitoring GmbH for all of 5 minutes I'd move further and advocate for full removal: https://bugzilla.mozilla.org/show_bug.cgi?id=1862004#c10 They don't list valid/expired/revoked domains for all of their sub-CAs, and even the ones they do are running on the same

RE: Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

2024-05-03 Thread Roman Fischer
Dear Ben, I’m not sure I understand “A-SIT asserts that it is precluded from joining the ACAB’c” correctly. Does A-SIT have any confirmation either from their government sponsor or from ACAB’c that they can’t join? Rgds Roman From: 'Ben Wilson' via dev-security-policy@mozilla.org Sent:

Re: CT Log Inclusion check: get-entry-and-proof unexpectedly returns "Not found"

2024-05-03 Thread Felix Linker
Thanks for the pointer, Andrew! Best, Felix > On 3 May 2024, at 00:29, Andrew Ayer wrote: > > Hi Felix, > > On Wed, 1 May 2024 10:18:17 -0700 (PDT) > Felix Linker mailto:linkerfe...@gmail.com>> wrote: > >> Hi everyone, >> >> I encountered an oddity with an inclusion of a certificate of mine