[cabfpub] Revocation Information

Gervase Markham gerv at mozilla.org
Tue Sep 23 09:53:58 MST 2014


On 23/09/14 16:47, Erwann Abalea wrote:
>> 3) Would you need some of that set of URLs to be secret (i.e. revealed
>> to Mozilla, but you would prefer Mozilla not to reveal them to others)?
>> If so, why?
> 
> Secrecy of these URLs/CAs is permitted by Mozilla CA policy, for 
> technically constrained CAs.

Exactly where technically constrained CAs fit into this is a very good
question. For now, assume they are included, so the question is: do the
reasons which might require a technically constrained subCA to be kept
confidential apply to the URL and data of the CRL which may one day
contain that subCA?

Gerv


More information about the Public mailing list