Thread questions S/MIME trust of the Comodo AAA root
Original title: Re: Comodo AAA Services Root and S/MIME
The visible post says interest is limited and leaves open whether other mail apps inherit the NSS trust store.
An oss-security reply from Steffen Nurpmeso quotes Hanno Böck on the Comodo AAA Services root and S/MIME. Böck says further investigation is unlikely and asks whether other mail applications use the NSS or Thunderbird certificate store as an S/MIME trust anchor. The snippet also asks whether those applications properly check X.509 paths, then cuts off.
Unconfirmed: The feed snippet is incomplete, and no finding about other mail clients is confirmed.
- The questions concern clients that source the NSS or Thunderbird certificate store.
- Path validation is raised but not answered in the visible text.
- No affected product versions or fixes are stated.
- Vendors
- Comodo
- Products
- ThunderbirdNSS
From the original article
Posted by Steffen Nurpmeso on Oct 22 Hanno Böck wrote in : ... |My interest in S/MIME is limited, I'm probably not gonna investigate |this much further. If anyone wants to look into this, the following |questions may be a good starting point: | |* Are there other e-mail applications that source the NSS/Thunderbird | cert store as their trust anchor for S/MIME?
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.