<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
On 11/01/2013 01:12 PM, From Gervase Markham:
<blockquote cite="mid:52738CBB.7090107@mozilla.org" type="cite"><br>
<pre wrap="">Quite so. The question here is not "are such practices acceptable when
new roots are created" - clearly, they are not. The question is: how do
we deal with this compatibility issue we have with a legacy root with an
unfortunate name?</pre>
</blockquote>
<br>
I'm sure there are and will be other issues that are unfortunate I
guess - key sizes, hashes, EKUs, CRLs, OCSP and much more...now
where to draw the line? <br>
<br>
<blockquote cite="mid:52738CBB.7090107@mozilla.org" type="cite">
<pre wrap="">You can argue, if you like, that roots issued before the BRs were
thought of and so which don't meet them should be immediately abandoned,
and nothing should ever be done to enable them to continue to function
for one second more, but normally the CABF has a less drastic approach
to backwards compatibility than that.
</pre>
</blockquote>
<br>
In this case it's not a root (of Verizon) but an intermediate CA to
them. I agree that there is some pragmatism as work and the forum,
on the other hand this isn't all new to them either and has been on
the map for a while (for both BIT and for Verizon). It's certainly a
headache to them, but I have a problem with the browser showing "<b>admin</b>"
as the issuing authority (not stating the various reasons now).<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>