Ubuntu
ca-certificates package

  1. Bug #310999
  2. Comment #89

Comment 89 for bug 310999

Revision history for this message
In , Ben-bucksch (ben-bucksch) wrote :

Comment 68 was great news, but I'd like some facts which support Robin's suggestions in a reliable and binding way.

Specifically: How many RAs do remain?

Why are there *any* sales partners which can act as RA? A sales partner does not have an incentive to check thoroughly, but quite the opposite.

I still think that any RA must run through the same audit as the CA itself, given that the RA performs one of the two core functions of the CA ( a) validation and b) signing).

I'd like all that to be formal and binding, in the policy documents. Which checks Comodo itself performs, which diligence. If there are any RAs, which requirements they have to meet, and how these are enforced.