[cabfpub] Misissuance of certificates

Ryan Sleevi sleevi at google.com
Mon Jan 18 18:52:32 UTC 2016


On Mon, Jan 18, 2016 at 10:45 AM, Rick Andrews <Rick_Andrews at symantec.com>
wrote:

> That discussion was challenging because each browser had different
> behavior regarding what it accepted as an SSL cert. I had captured some of
> the differences here: https://cabforum.org/wiki/Browser%20Behavior, and
> that's likely out of date.
>
> -Rick


I don't see any reason for there to be challenge based on that. It's a
question of what the accepted definition of "in scope" is. Presumably,
browsers will want what they accept as "in scope", but that wasn't what
stalled the conversation at all - it was CAs wanting stuff that browsers
ALL accepted as "out of scope".
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160118/16d8dbd3/attachment-0003.html>


More information about the Public mailing list