10 Dec
2008
10 Dec
'08
4:43 p.m.
On Wed, 2008-12-10 at 16:36 +0100, Ciaran Farrell wrote:
Sorry, I should have been more clear about this. One of the discussion points was that the CaCert people were worried about liability if their private key were somehow to be compromised. They were therefore seeking to force end users to accept some type of disclaimer. To do this, they wanted distributors to write it directly into the EULA/SLA.
Yuck. I'm not sure why they think they would have more liability if Fedora/openSUSE distribute their root certs than they would have if they only distributed them directly to end users. A traditional disclaimer of warranty should suffice in such scenarios.
~spot