On Tue, Nov 15, 2016 at 3:02 AM, <wangsn1...@gmail.com> wrote: > > Because we misunderstand that we only need to provide the related chapters of > CP/CPS in English, and non-related sections are not required. We are terribly > sorry that we misinterpreted your requirement and upload an inconsistent > CP/CPS in English. Someone inferred that we don’t utilize a version control > for CP/CPS. In fact, we do have a strict control for master version CP/CPS > (see section 1.5 in CP/CPS). > We understand that it is our responsibility to provide accurate English > versions and ensure consistency and synchronicity between Chinese and English > versions. Hence, we have decided to strictly implement version controlling of > English version CP/CPS according to section 1.5 in CP/CPS. The auditor is > reviewing our complete CP/CPS in English and the new version will be > published as soon as possible. > We will keep open mind to process any further issues.
I think Mozilla needs to update its guidance to CAs. The information checklist directions (https://wiki.mozilla.org/CA:Information_checklist#Verification_Policies_and_Practices) says "If the CP/CPS documents are not in English, then the portions of those documents pertaining to verification of the certificate subscriber must be translated into English." This makes me think that the expectation is not that the full doc is in English and that a one-time translation is acceptable. I don't think we should hold it against GDCA that Mozilla's requirements have apparently changed. Thanks, Peter _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
