[cabfpub] Revocation Information
Gervase Markham
gerv at mozilla.org
Tue Sep 23 09:53:58 MST 2014
On 23/09/14 16:47, Erwann Abalea wrote:
>> 3) Would you need some of that set of URLs to be secret (i.e. revealed
>> to Mozilla, but you would prefer Mozilla not to reveal them to others)?
>> If so, why?
>
> Secrecy of these URLs/CAs is permitted by Mozilla CA policy, for
> technically constrained CAs.
Exactly where technically constrained CAs fit into this is a very good
question. For now, assume they are included, so the question is: do the
reasons which might require a technically constrained subCA to be kept
confidential apply to the URL and data of the CRL which may one day
contain that subCA?
Gerv
More information about the Public
mailing list