Re: Certigna Root Inclusion Request

2009-02-16 Thread Yannick LEPLARD
Le 14 févr. 09 à 15:09, Frank Hecker a écrit : Yannick LEPLARD wrote: Another alternative is to publish just those portions of the CPS that address the question of email verification, and have your auditor confirm to us that the section(s) in question are from the CPS that was

Re: Certigna Root Inclusion Request

2009-02-12 Thread Yannick LEPLARD
everybody agree with, we can send you the fair portion of CPS in english and our auditor will confirm you the genuineness of the document. ( I think our CPS is not very different from others, but it refers to a lot of internal documents. ) Yannick LEPLARD Directeur R&D 20, allée d

Re: Certigna Root Inclusion Request

2009-02-12 Thread Yannick LEPLARD
measurements), and don't have to be published. Yannick LEPLARD Directeur R&D 20, allée de la râperie 59650 Villeneuve d'Ascq tél. : 03 20 79 24 09 fax. : 03 20 34 20 52 www.dhimyotis.fr -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Certigna Root Inclusion Request

2009-02-11 Thread Yannick LEPLARD
tion from the auditor or other trusted outside party that the document substantially echoes the audited CPS. -- So What should we do ? Should we ask our auditor a certified document about our practices for e-mail validation ? Yannick LEPLARD Directeur R&D Dhimyotis S.A. 20, allée de la

Re: Certigna Root Inclusion Request

2009-02-10 Thread Yannick LEPLARD
You state ". . . CPS are not published . . . " Repeatedly, the "WebTrust Program for Certification Authorities" indicates that the CPS is PUBLISHED. This means it is made available to the public, to both those who have certificates and those who trust those certificates. If you were audited

Re: Certigna Root Inclusion Request

2009-02-10 Thread Yannick LEPLARD
We are at the same level than the DCSSI CA that was approved a few days ago. Each CA is looked at independently and each CA has its own CP/CPS, audit etc. I just wanted to explain that DCSSI is the french government CA, and PRIS/RGS is the new highest level standard for french CAs.

Re: Certigna Root Inclusion Request

2009-02-10 Thread Yannick LEPLARD
Le 9 févr. 09 à 20:54, Eddy Nigg a écrit :On 02/09/2009 09:35 PM, kathleen95...@yahoo.com:Of course. I will await your next post to this discussion.Just browsing through the various documents and I noticed the following so far.It seems to me that the code signing bit *should not* be activated, it s