Continue discussion about "Define actions or practices that bar a company from being a trusted CA (#19)"

[Han Yuwei]

In https://github.com/mozilla/pkipolicy/issues/19 Gerv talked about what shouldn't CA do but the discussion thread listed didn't continue.

There's my questions:
1. What's the definition about "The same organzition"?
The structure of large companys are very complicated now. With unaccoutable transactions of shares It's too hard for normal internet users like me to distinguish. And I can't easily know if shareholders' mind affected the company's running.

2. What's MITM-style ?
Since lots of CDNs like Cloudflare provide such a "MITI-style" service, there's a necessity to clarify it.

3. Is spying system avoidable?
Since major IT companys had involved in PRISM, it's time to face it.

4.Is government CAs acceptable?

[Gervase Markham]

On 30/11/16 23:08, Han Yuwei wrote:
> In https://github.com/mozilla/pkipolicy/issues/19 Gerv talked about
> what shouldn't CA do but the discussion thread listed didn't
> continue.

That issue is not currently targetted for 2.4. In the message titled
"Mozilla Root Store Policy 2.4: goals and process", I said:

> If you think any of them should be targetted at 2.4, please make the
> case in the thread attached to this message. Remember to explain how
> the change is either "urgent" or "relatively uncontroversial and
> self-contained".

Before we discuss this topic, you need to make that case. Otherwise, I
would ask that we not discuss it right now.

Gerv

[Han Yuwei]

在 2016年12月1日星期四 UTC+8下午3:14:14，Gervase Markham写道：

Ok. Could you tell me when we can discuss it? After 2.4 release?

[Gervase Markham]

On 01/12/16 15:50, Han Yuwei wrote:
> Ok. Could you tell me when we can discuss it? After 2.4 release?

Once we ship 2.4, we will then have a discussion about how best to
handle the remaining issues. That doesn't mean we will necessarily
discuss this straight away; it depends on the state of things at the time.

Gerv