[Standards] compliance: cert(s)

[Mridul Muralidharan]

Justin Karneges wrote:
> On Thursday 14 June 2007 2:59 pm, Peter Saint-Andre wrote:
>> Would it be appropriate to recommend that client and server developers
>> bundle support for the root certificate under which the XMPP ICA issues
>> domain certificates?
> 
> The XSF is not in a position to vouch for the trustworthiness of a certificate 
> authority.  

+1

 > At best, you could cite some other organization as being the
> basis of the recommendation.  For example, a XEP could claim that StartCom is 
> WebTrust-certified, and is therefore generally accepted as trustworthy for 
> economic usage over the open internet.
> 
> That said, I think making a recommendation like this is mostly redundant.

Yes, if it is trusted, most keystores will already include it as a ca by 
default.

Mridul

> 
> -Justin