Re: The TLS Report

2008-07-13 Thread Frank Hecker
Eddy Nigg wrote: Also interesting choice of the CA, even though I realized that you happen to change your server cert quite frequently ;-) Well, the price was a factor :-) However what I found even more important was support for SubjAltName and the ability to get a certificate for both

Re: The TLS Report

2008-07-13 Thread Eddy Nigg
Frank Hecker: Note in that regard that the StartCom interface is actually not as flexible as I'd like. It forced me to specify www.hecker.org as the CN and hecker.org as a SAN, when I would have preferred it the other way around, since hecker.org is now the canonical site name. There are

Re: Where are the binaries for nss 3.12 and nspr 4.7.1?

2008-07-13 Thread cafl
On Jun 24, 11:03 am, Glen Beasley [EMAIL PROTECTED] wrote: hi, cannot you not just build the binaries yourself? http://www.mozilla.org/projects/security/pki/nss/nss-3.12/nss-3.12-re...http://www.mozilla.org/projects/security/pki/nss/nss-3.11.4/nss-3.11 I found this reply in the

Re: GlobalSign requests (replacement root, EV)

2008-07-13 Thread Nelson B Bolyard
Eddy Nigg wrote, On 2008-07-13 13:53: This is perhaps the first EV request which doesn't have an operating OCSP responder at this stage. The EV guidelines requires it only in 2010 however I haven't come across a CA which doesn't provide this service *and* issues EV. Actually, there are

Re: GlobalSign requests (replacement root, EV)

2008-07-13 Thread Eddy Nigg
Nelson B Bolyard: Eddy Nigg wrote, On 2008-07-13 13:53: This is perhaps the first EV request which doesn't have an operating OCSP responder at this stage. The EV guidelines requires it only in 2010 however I haven't come across a CA which doesn't provide this service *and* issues EV.