Metadata Distribution Subcommittee of TAC

["Cantor, Scott" <>]

On 11/21/13, 1:21 PM, "Tom Scavo" 
<>
 wrote:

>Why do they only call out root CAs? Why not intermediate CAs and end
>entities as well?

It's not just roots, but their leverage is with the root CA program
because they can dictate policy as a condition of being in the root store.
They're telling the roots they won't be allowed to issue certs with SHA-1
after that date.

If that's all they're really doing, this doesn't really affect much on the
federation side. The hitch is that it's not clear yet if this is really
all they're doing.

-- Scott