<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 02/14/2015 12:33 AM, Dean Coclin
wrote:<br>
</div>
<blockquote
cite="mid:14D026C7F297AD44AC82578DD818CDD038EF1EA316@TUS1XCHEVSPIN35.SYMC.SYMANTEC.COM"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1"><span style="color:#1F497D">You’ll
probably realize after reading this that there isn’t much
actionable material here as many members are “scoping” or
“waiting for info” without any concrete response dates. We’ll
keep this tally going and update as we get more info. <o:p></o:p></span>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Globalsign: <span
style="color:#1F497D">Yes, can support</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Symantec: <span
style="color:#1F497D">We don’t support this today. We’ve
received very little demand for it from customers, but we’re
in the process of scoping out the effort.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Comodo:<span
style="color:#1F497D"> Yes, for CRL and OCSP</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Trend<span
style="color:#1F497D"> </span>Micro:<span
style="color:#1F497D"> Yes</span><br>
GoDaddy: <span style="color:#1F497D">Waiting for info from
network team</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Entrust:<span
style="color:#1F497D"> Yes for CRL and OCSP.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in">Trustwave:<span
style="color:#1F497D"> We don’t support this today. Just
started scoping the effort. Not many requests for this</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Digicert:<span
style="color:#1F497D"> We currently do not support it. Our
connectivity providers support it, and it could be done with
CRLs and OCSP, but we’d need to look for any gotchas before
pulling the trigger. We’ve only had a couple of customers
ask whether we support it.<o:p></o:p></span></p>
</div>
</blockquote>
<br>
To add StartCom to the list, we could support it for almost
everything, but we have some historical CRL distribution points that
can't support IPv6 for now. It seems that OCSP would work, but CRLs
not 100%.<br>
<br>
Same as with Digicert, demand for IPv6 has been so low that we
haven't invested into it so far.<br>
<br>
<div class="moz-signature">-- <br>
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>