Re: Summary of Camerfirma's Compliance Issues

2021-01-05 Thread Ramiro Muñoz via dev-security-policy
In response to Ryan’s latest post, we want to provide the community with Camerfirma’s due responses and we hope this clears up any doubts that might have arisen. Ryan argument number 1: “These statements are ones that are sort of "true by degree". That is, if I was to dispute 1, Camerfirma

Re: Summary of Camerfirma's Compliance Issues

2021-01-05 Thread Ryan Sleevi via dev-security-policy
On Tue, Jan 5, 2021 at 9:01 AM Ramiro Muñoz via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > In response to Ryan’s latest post, we want to provide the community with > Camerfirma’s due responses and we hope this clears up any doubts that might > have arisen. > > Ryan

Re: Extending Android Device Compatibility for Let's Encrypt Certificates

2021-01-05 Thread Man Ho (Certizen) via dev-security-policy
I'm curious whether this approach of cross-signing from a root certificate which has already expired is exceptional for Let's Encrypt.  I'm not aware of any discussion on what conditions this approach could be accepted by Mozilla and other root certificate programs. Or, is it just an usual