[SSL Observatory] https://controller.mobile.lan

Erwann ABALEA erwann at abalea.com
Wed Feb 8 02:38:11 PST 2012


2012/2/8 Jacob Appelbaum <jacob at appelbaum.net>

> On 02/07/2012 05:52 PM, Erwann ABALEA wrote:
> > 2012/2/7 Jacob Appelbaum <jacob at appelbaum.net>
> > [...]
> >
> >>> As was pointed out, this cert was issued in 2010. The CAB Forum has
> >>> addressed the issuance of SSL certs to non FQDNs in the baseline
> >>> requirements which were recently adopted.
> >>>
> >>
> >> Is it true that the new requirements won't come into effect until 2016?
> >
> > Any CA can choose to apply these requirements now. For some of them, it's
> > easy, since they never produced such certificates.
> > Such certificates were listed in "Problematic practices" in the Mozilla
> CA
> > Policy, but tolerated. Kind of a grey zone.
> >
> > The delay until 2016 is a compromise so all implied actors can find a
> > different solution for their own problems.
>
> Compromise indeed.
>

Wrong translation. "Compromis" in french is translated either as
"compromise" or "trade-off", depending on the meaning.

-- 
Erwann.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eff.org/pipermail/observatory/attachments/20120208/698c28f3/attachment.html>


More information about the Observatory mailing list