[cabfpub] FW: [cabfquest] Key Size Exception

[Eddy Nigg (StartCom Ltd.)]

On 03/07/2013 12:23 AM, From Ryan Sleevi:
> I think regardless of what this Forum decides, Browsers/Root Stores 
> will continue to operate their programs independently. Granting 
> exceptions through language in the BR certainly can provide a 
> framework, but if no root store respects or accepts that framework, it 
> serves no end. Likewise, this Forum may decide NOT to include 
> particular language in the BRs, but Browsers/Root Stores that are 
> committed to moving the security standard higher may decide to 
> independently impose such restrictions, for the protection and safety 
> of their users.
>

Right, but for the record here we are talking about "downgrading" or 
introducing an exception. Even if software vendors would agree to it, I 
believe such certificates would be not in compliance with the BR - until 
that has been changed and approved for such an exception.

Therefor I believe the software vendors acceptance is also limited in 
this respect.


Regards
Signer: 	Eddy Nigg, COO/CTO
	StartCom Ltd. <http://www.startcom.org>
XMPP: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Twitter: 	Follow Me <http://twitter.com/eddy_nigg>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20130307/76dbae4e/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4540 bytes
Desc: S/MIME Cryptographic Signature
Url : https://cabforum.org/pipermail/public/attachments/20130307/76dbae4e/attachment.bin