<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>I read the Mozilla report carefully that I think it is clear, thanks.<br><br>Regards,<div><br></div><div>Richard</div></div><div><br>On Apr 4, 2015, at 08:30, Ryan Sleevi <<a href="mailto:sleevi@google.com">sleevi@google.com</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 3, 2015 at 5:24 PM, Richard Wang <span dir="ltr"><<a href="mailto:richard@wosign.com" target="_blank">richard@wosign.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">I agree the editor opinion that browser should treat west CA same as China CA!<br>
Comodo and TurkTrust also issued the wrong cert for Google, but do NOT remove their root.<br></blockquote><div><br></div><div>There's a lot fundamentally wrong here - both from Pescatore and from Richard's statements above.</div><div><br></div><div>To the extent I can or will comment on this, I would encourage all interested parties to read the "longer document" provided by Mozilla on <a href="https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/">https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/</a> , which should make it abundantly clear the uniqueness of the situation and the factors that go in to such decisions, none of which include nationality.</div></div></div></div>
</div></blockquote></body></html>