Changes

Jump to: navigation, search

CA/Camerfirma Issues

9 bytes removed, 18:10, 3 December 2020
m
deleted unnecessary text
==Issue B: Delegation of validation to StartCom following Mozilla's distrust of StartCom (March 2017)==
In March 2017, following the [https://wiki.mozilla.org/CA:WoSign_Issues distrust of WoSign/StartCom], Camerfirma [https://bugzilla.mozilla.org/show_bug.cgi?id=1350615 entered into a business relationship with StartCom]. As part of that relationship, StartCom's CEO Iñigo Barreira underwent training as an RA for Camerfirma. As described, Iñigo performed organizational and domain validation for customers of StartCom, and then instructed Camerfirma to issue the certificates. Camerfirma was not directly involved in the validation except for EV certificates, and Iñigo's description of the domain validation steps were that they were performed under the "any other method" allowance that existed in the Baseline Requirements, as well as functioning as a Delegated Third Party for domain validation.
At the time of adopting this practice, the CA/Browser Forum had already attempted to remove the "any other method", as acknowledged by StartCom, but that had been complicated by IP issues.
Confirm, administrator
5,526
edits

Navigation menu