[cabfpub] Concerns regarding Mozilla Root Program/Baseline Requirements

[Wayne Thayer]

Here's a potentially big one:  adding or removing SAN values from UCC
certificates.  I believe that most CAs will allow customers to add a SAN
value (after passing domain validation) at any point in the life of a
certificate.  Do we want to continue to allow this for 4 & 5 year duration
certificates?

Thanks,

Wayne





On 8/5/13 6:31 AM, "Gervase Markham" <gerv at mozilla.org> wrote:

>On 05/08/13 14:14, Rich Smith wrote:
>> are no other such issues, but I think at this point we can agree that
>>we did
>> not give the re-issuance/re-key questions enough consideration when
>>drafting
>> the BRs and we should probably do so now so that we hash out any and all
>> problematic items at one time.
>
>+1 for taking the necessary time.
>
>Gerv