4 ms·
Speaking of removing trust bits; the ever-delayed Symantec saga continues with no clear decision. What concerns me is: - the lack of public communication, as
by jbergstroem 9y ago
Speaking of removing trust bits; the ever-delayed Symantec saga continues with no clear decision.
What concerns me is:
- the lack of public communication, as shown here (tl;dr: private meetings): https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/k3PaF0UoE0I https://groups.google.com/forum/#!topic/mozilla.dev.security...
- the contrast between symantec and the mozilla security groups path forward [as well as how its communicated] (https://groups.google.com/d/msg/mozilla.dev.security.policy/C45hQChFLyc/4HyG0iaMBAAJ https://groups.google.com/d/msg/mozilla.dev.security.policy/..., https://www.symantec.com/connect/blogs/symantec-s-response-google-s-subca-proposal https://www.symantec.com/connect/blogs/symantec-s-response-g...)
- ivanr 9y agoI don't think you're being fair toward Mozilla. They had a meeting with Symantec and reported on it; there were no details because Symantec is going to soon publish everything. They probably had the meeting only because Gerv was in the area. Mozilla have been transparent the whole time. Google's approach is clearly different to that of Mozilla, but IIRC they have never pledged transparency. They're a commercial entity and they're doing what they think is right and/or is in their interests.
- jbergstroem 9y agoI can understand how my comment might have come off as somewhat judgmental (to either side) but that was not my intention. The idea was to [without derailing the thread too much] give people interested in certificate issues a relatively quick summary on what has happened and my concern about it.
- yuhong 9y agoI wonder if "senior executives" at Google are really involved.
- dxf 9y agoThere is discussion on the Chromium blink-dev list: https://groups.google.com/a/chromium.org/d/topic/blink-dev/eUAKwjihhBs/discussion https://groups.google.com/a/chromium.org/d/topic/blink-dev/e...