Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Echekwara usoro a. Biko jụọ ajụjụ ọhụrụ ma ọ bụrụ na ị chọrọ enyemaka.

When will Digital Certificate Manager show India PKI CCA India 2007 from Mozilla in Firefox?

siddharthb
siddharthb
more options

Mozilla Firefox for all Operating Systems must respect and contain Government of India's Root CA and CA Certificates and improve compliance with Indian IT Act 2000 (Cross Certification) and law enforcement rules by including these by default: http://cca.gov.in/cca/?q=root_certificate.html Root Certificate 2011 http://cca.gov.in/cca/sites/default/files/files/cca%20india%202011.cer Root Certificate 2007 http://cca.gov.in/cca/sites/default/files/files/cca%20india%202007.cer http://cca.gov.in/cca/?q=display_cert.php&code=Under%20RCAI%202011 http://cca.gov.in/cca/?q=display_cert.php&code=Under%20RCAI%202007

Any reasons for missing these out on firefox, a globally renowned and acknowledged browser from national security,security architecture ... perspectives?

Manually importing these certificates doesnot make sense for global product like Mozilla Firefox.

Mozilla Firefox for all Operating Systems must respect and contain Government of India's Root CA and CA Certificates and improve compliance with Indian IT Act 2000 (Cross Certification) and law enforcement rules by including these by default: http://cca.gov.in/cca/?q=root_certificate.html Root Certificate 2011 http://cca.gov.in/cca/sites/default/files/files/cca%20india%202011.cer Root Certificate 2007 http://cca.gov.in/cca/sites/default/files/files/cca%20india%202007.cer http://cca.gov.in/cca/?q=display_cert.php&code=Under%20RCAI%202011 http://cca.gov.in/cca/?q=display_cert.php&code=Under%20RCAI%202007 Any reasons for missing these out on firefox, a globally renowned and acknowledged browser from national security,security architecture ... perspectives? Manually importing these certificates doesnot make sense for global product like Mozilla Firefox.

All Replies (2)

philipp
philipp
  • Moderator
more options

hello, since the inclusion of root certificates into firefox can have grave security impacts for users, so this will be handled with great consideration and only after audits and reviews have been properly carried out. according to www.mozilla.org/projects/security/certs/pending/index.html the status for the inclusion of the root certificates from Government of India (CCA) is currently on hold.

https://www.mozilla.org/projects/security/certs/policy/

user633449
user633449
more options

Please update to Firefox 24 as well.