277577 - Thawte Freemail CA not built in

Status: RESOLVED WONTFIX

(CA Program :: CA Certificate Root Program, task)

Description

[Hirners Hotel Guide]

We have got a Thawte Freemail certificate for [e-mail]. It is issued by
"Thawte Personal Freemail Issuing CA". This CA is not built into Thunderbird by
default but there is another one built in called "Thawte Personal Freemail CA".

Maybe the built-in token is out of date and needs to be updated. Btw, the (new?)
"Thawte Personal Freemail Issuing CA" is built into Outlook Express by default.

Comment 1

[Hirners Hotel Guide]

If it would help you, I can append the certificates as an attachment.

Comment 2

[Hirners Hotel Guide]

It seems that "Thawte Personal Freemail Issuing CA" (which is used to sign the
mail certificates and which is NOT built-in) is a sub-certificate of "Thawte
Personal Freemail CA" (which is built in), i.e. if I include the whole
certificate tree with my S/MIME mail, Thunderbird says that the email has a
trusted signature. So it is not really a bug but it would be nice if the "Thawte
Personal Freemail Issuing CA" certificate would be built-in, too (as in other
clients) in order to avoid confusions and inflated mail bodies.

Comment 3

[Josh Birnbaum]

->mozilla.org/CA Certs

See http://www.hecker.org/mozilla/ca-certificate-policy for more information on
how CAs get added.  But if the root CA is already built in, I think this is a
wontfix.

Comment 4

[Nick Bebout]

This is a WONTFIX, because if I am not mistaken, Mozilla will only include the root certificates, not intermediate certificates.