Path: g2news1.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local2.nntp.dca.giganews.com!nntp.mozilla.org!news.mozilla.org.POSTED!not-for-mail
NNTP-Posting-Date: Tue, 02 Feb 2010 11:17:52 -0600
Date: Tue, 02 Feb 2010 17:17:51 +0000
From: Gervase Markham <g...@mozilla.org>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.7) Gecko/20100111 Lightning/1.0b1 Thunderbird/3.0.1
MIME-Version: 1.0
Newsgroups: mozilla.dev.security.policy
Subject: Re: CNNIC Root Inclusion
References: <DY-dnYQIkKax1_3WnZ2dnUVZ_omdnZ2d@mozilla.org>	<mailman.3355.1264694836.4112.dev-security-policy@lists.mozilla.org>	<fdWdnfKh0sFTgP_WnZ2dnUVZ_hednZ2d@mozilla.org>	<hKOdna-WUsBWzP_WnZ2dnUVZ_r2dnZ2d@mozilla.org>	<RfWdnR2wKdp_H_nWnZ2dnUVZ_jGdnZ2d@mozilla.org>	<XNOdnfGVPcc3BPnWnZ2dnUVZ_u2dnZ2d@mozilla.org> <mailman.3640.1265052505.4112.dev-security-policy@lists.mozilla.org>
In-Reply-To: <mailman.3640.1265052505.4112.dev-security-policy@lists.mozilla.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Message-ID: <PoqdnStgF8Tdw_XWnZ2dnUVZ_v5i4p2d@mozilla.org>
Lines: 15
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 188.221.47.195
X-AuthenticatedUsername: NoAuthUser
X-Trace: sv3-vrv/jJ6imP5dyW8blwNJgsbbh52NIRWHog8gwmFcN+gB/ZoF3O6Ke7V+EsyabIBQr3VrEXInSeScnbL!pouIV2KoEb+dCo+K6twScWvK6FERH+2eQkzVmSTys6zyTd30ZADZ8HyZoBYkOlW7o4riqply8Fot!uhKBxI90efghqQ==
X-Complaints-To: abuse@mozilla.org
X-DMCA-Complaints-To: ab...@mozilla.org
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40

On 01/02/10 19:28, Kyle Hamilton wrote:
> This discussion is and was inevitable, unfortunately, considering that
> the only real fix for this -- which is not "remove the trust from the
> root" -- is something which has repeatedly been shot down: CA branding
> in the browser.

And your message doesn't really answer any of the objections which have
shot it down in the past. :-|

Anyone who thinks this is a good idea should go off and write an
extension which does it, as a proof of concept.

If any Chinese person wants to install that extension, they could.

Gerv