459589 - Dead link to CA listings at netscape.com

Status: RESOLVED FIXED

(SeaMonkey :: Help Documentation, defect)

Description

[Lars P M]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081011 SeaMonkey/2.0a2pre reconfigured by user.js v1.1
Build Identifier:  

http://mxr.mozilla.org/comm-central/source/suite/locales/en-US/chrome/common/help/using_certs_help.xhtml#67

Above is a link to https://certs.netscape.com/ which just returns an error. The resource is no longer there.



Reproducible: Always

Comment 1

[Stefan [:stefanh]]

Setting to block the tracker bug so it won't get lost. If we should have a link to a list of CA:s, I'd prefer it to be a m.o address. There is http://www.mozilla.org/projects/security/certs/included/, but, as I understand it, they're already included. Ian, any thoughts/ideas?

Comment 2

[Ian Neal]

(In reply to comment #1)
> Setting to block the tracker bug so it won't get lost. If we should have a link
> to a list of CA:s, I'd prefer it to be a m.o address. There is
> http://www.mozilla.org/projects/security/certs/included/, but, as I understand
> it, they're already included. Ian, any thoughts/ideas?
I'm not aware of that already being included and a quick search of our help code doesn't provide any hits either, that being the case I am happy for it to be changed, as you say it is better to be an m.o address.

Comment 3

[Stefan [:stefanh]]

(In reply to comment #2)
> (In reply to comment #1)
> > Setting to block the tracker bug so it won't get lost. If we should have a link
> > to a list of CA:s, I'd prefer it to be a m.o address. There is
> > http://www.mozilla.org/projects/security/certs/included/, but, as I understand
> > it, they're already included. Ian, any thoughts/ideas?
> I'm not aware of that already being included and a quick search of our help
> code doesn't provide any hits either, that being the case I am happy for it to
> be changed, as you say it is better to be an m.o address.

What I ment is that http://www.mozilla.org/projects/security/certs/included/ looks like a list of CA's that are providing the already included certificates in m.o products, not a 'general' list of CA's (that the old link possibly was refering to).

Comment 4

[Stefan [:stefanh]]

Maybe it's best to remove that whole paragraph and not giving users any specific list of CAs -  I doubt we can find a general list of CA's that you can download certs from (also sounds scary to provide - I think you can't be sure that the certs will work flawlessly). It might be worth having the m.o link somewhere, though (as a list of CA's that provides the certs already included).

Comment 5

[Stefan [:stefanh]]

OK, so now I understand. In order for the certificate to be recognized, the CA has to have a root CA certificate included in the browser/product.

Comment 6

[Stefan [:stefanh]]

Attachment: Fix link and clarify that only certs from those CA's will be recognized

Correct me if I'm wrong since this is based on comment #5: If there is no root CA certificate, certificates from the CA won't be recognized (you'll get a warning - but you can probably skip the warning). I guess a user could install a root CA certificate, but I'm not convinced that we should mention that (who knows if it works and is safe etc).

Comment 7

[Ian Neal]

Comment on attachment 343716 [details] [diff] [review]
Fix link and clarify that only certs from those CA's will be recognized

> <p>You can obtain a certificate today by visiting the URL for a certificate
>   authority and following the on-screen instructions. For a list of certificate
>-  authorities, see the online document
>-  <a href="https://certs.netscape.com/">Client Certificates</a>.</p>
>+  authorities issuing certificates recognized by &brandShortName;, see the
>+  online document
>+  <a href="http://www.mozilla.org/projects/security/certs/included/">Included
>+  Certificate List</a>.</p>
Seems to be alot of certificate(s) in one sentence but I cannot see an easy way of fixing that.

Comment 8

[Stefan [:stefanh]]

Pushed 676:edaf847ba874.