Re: Fate of Secure Origins in Question?

I echo Brad's suggestion to take this concern to Mozilla's security policy
group. Issuing unconstrained and un-audited sub-CA certs would violate
Mozilla's certificate policy (see section 8 of
https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/inclusion/).
The press release doesn't actually say such certs would be unconstrained
and GeoTrust should be well aware of these requirements, but it doesn't
hurt to follow-up and make sure.

-Dan Veditz