[cabfpub] Revocation Information

Gervase Markham gerv at mozilla.org
Tue Sep 23 16:53:58 UTC 2014

On 23/09/14 16:47, Erwann Abalea wrote:
>> 3) Would you need some of that set of URLs to be secret (i.e. revealed
>> to Mozilla, but you would prefer Mozilla not to reveal them to others)?
>> If so, why?
> Secrecy of these URLs/CAs is permitted by Mozilla CA policy, for 
> technically constrained CAs.

Exactly where technically constrained CAs fit into this is a very good
question. For now, assume they are included, so the question is: do the
reasons which might require a technically constrained subCA to be kept
confidential apply to the URL and data of the CRL which may one day
contain that subCA?


More information about the Public mailing list