[cabfpub] FW: [cabfquest] Key Size Exception
Eddy Nigg (StartCom Ltd.)
eddy_nigg at startcom.org
Wed Mar 6 22:48:36 UTC 2013
On 03/07/2013 12:23 AM, From Ryan Sleevi:
> I think regardless of what this Forum decides, Browsers/Root Stores
> will continue to operate their programs independently. Granting
> exceptions through language in the BR certainly can provide a
> framework, but if no root store respects or accepts that framework, it
> serves no end. Likewise, this Forum may decide NOT to include
> particular language in the BRs, but Browsers/Root Stores that are
> committed to moving the security standard higher may decide to
> independently impose such restrictions, for the protection and safety
> of their users.
>
Right, but for the record here we are talking about "downgrading" or
introducing an exception. Even if software vendors would agree to it, I
believe such certificates would be not in compliance with the BR - until
that has been changed and approved for such an exception.
Therefor I believe the software vendors acceptance is also limited in
this respect.
Regards
Signer: Eddy Nigg, COO/CTO
StartCom Ltd. <http://www.startcom.org>
XMPP: startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: Join the Revolution! <http://blog.startcom.org>
Twitter: Follow Me <http://twitter.com/eddy_nigg>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130307/76dbae4e/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4540 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130307/76dbae4e/attachment-0001.p7s>
More information about the Public
mailing list