[cabfpub] Naming rules

[Moudrick M. Dadashov]

If auditor of the CA is aware of national registry, no need in any other knowledge.
Proof of non-existance in this case would be government decision or law about establishing centralised registry.
Thanks,M.D.


Sent from Samsung tablet.
-------- Original message --------From: Ryan Sleevi via Public <public at cabforum.org> Date: 3/24/17  23:29  (GMT+01:00) To: Ben Wilson <ben.wilson at digicert.com> Cc: Ryan Sleevi <sleevi at google.com>, public at cabforum.org Subject: Re: [cabfpub] Naming rules 


On Fri, Mar 24, 2017 at 6:23 PM, Ben Wilson <ben.wilson at digicert.com> wrote:
I don’t have an answer for that one except let the CA assert that it is uniquely identifiable and let the auditor examine it.
Right, the issue is that unless the auditor of each CA is aware of the other CAs (or, more aptly, of all CAs), this cannot be effectively audited. That is, it requires a proof of non-existence, except one cannot be provided. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170325/6c05a3d4/attachment-0003.html>