On Wed, 2008-12-10 at 16:36 +0100, Ciaran Farrell wrote:
Sorry, I should have been more clear about this. One of the
discussion
points
was that the CaCert people were worried about liability if their
private key
were somehow to be compromised. They were therefore seeking to force
end users
to accept some type of disclaimer. To do this, they wanted
distributors to
write it directly into the EULA/SLA.
Yuck. I'm not sure why they think they would have more liability if
Fedora/openSUSE distribute their root certs than they would have if they
only distributed them directly to end users. A traditional disclaimer of
warranty should suffice in such scenarios.
~spot