For sale: Trusted root SSL CA signing certificate

Re:For sale: Trusted root SSL CA signing certificate by rmhrisk on Saturday February 09, 2013 @04:02PM (#5193994)

Thanks Adam, yes these are not MITM certificates.

They are used by large environments like Google and Microsoft to issue certificates for their assets and people.

They are contractually and technically (new but now standard) prohibited from using them for malicious use cases including MiTMs.

They are audited to conform with those terms and must meet the same requirements a certificate authority in the Mozilla guidelines.

[ Parent | on HN ]

Re:For sale: Trusted root SSL CA signing certificate by ivanr on Saturday February 09, 2013 @05:15PM (#5194268)

Are they audited by GlobalSign, or by an independent third-party (i.e., same as all other CAs)?

[ Parent | on HN ]

Re:For sale: Trusted root SSL CA signing certificate by rmhrisk on Saturday February 09, 2013 @05:20PM (#5194295)

For us we require CAs that are not technically constrained to be independently audited to WebTrust for CA requirements, Moving forward thanks to Mozillas new policy the same will be true for all CAs.

[ Parent | on HN ]