morgs

8 ms·

1. 1.▲
   by morgs 16y ago

   In 1999, Netscape started charging something like $100,000/year + $5000 per root cert, before there were any audit requirements. I think the idea was to weed out those who couldn't afford to run a CA worthy of browser inclusion. I'm no long
2. 2.▲
   by morgs 16y ago

   Complying with the audit is costly - both in direct costs to the auditors, and in implementing the infrastructure and policies and procedures to pass the audit.
3. 3.▲
   by morgs 16y ago

   It's the WebTrust audit for Certification Authorities: http://www.webtrust.org/certauth_fin.htm (warning: PDF)
4. 4.▲
   by morgs 16y ago

   AFAIK it was him - having developed the first non-US 128 bit crypto capable SSL web server called Sioux (basically, Apache + SSLeay) he was on all the same mailing lists as the Netscape crypto guys. He then realised that the certs were more