[cabfpub] BR Issue 7

[i-barreira at izenpe.net]

Agree with Yngve, it happens very often


Iñigo Barreira
Responsable del Área técnica
i-barreira at izenpe.net
945067705


ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!
ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.


-----Mensaje original-----
De: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] En nombre de Yngve N. Pettersen (Developer Opera Software ASA)
Enviado el: martes, 06 de noviembre de 2012 19:19
Para: Rob Stradling; Paul Tiemann
CC: public at cabforum.org
Asunto: Re: [cabfpub] BR Issue 7

On Tue, 06 Nov 2012 19:01:03 +0100, Paul Tiemann <paul.tiemann.usenet at gmail.com> wrote:

> +1 to what Rob said.
>
> We recently were faced with the question of including AIA:caIssuer in a  
> sub CA and decided against it because we couldn't identify any benefit.   
> If a browser client doesn't trust the root that the sub CA came from, 
> it's not likely to change its mind and begin to trust the root just 
> because it can more easily locate the file online.

The benefit is that users will be able to visit all of your customer's secure web sites even if the web site administrator forgot to include your intermediate CA certificate when they installed their certificate.



--
Sincerely,
Yngve N. Pettersen
********************************************************************
Senior Developer		     Email: yngve at opera.com
Opera Software ASA                   http://www.opera.com/
Phone:  +47 96 90 41 51              Fax:    +47 23 69 24 01
********************************************************************
_______________________________________________
Public mailing list
Public at cabforum.org
https://cabforum.org/mailman/listinfo/public