On Tuesday, November 15, 2016 at 10:41:28 AM UTC-8, Peter Bowen wrote: > I think Mozilla needs to update its guidance to CAs. The information > checklist directions > (https://wiki.mozilla.org/CA:Information_checklist#Verification_Policies_and_Practices) > says "If the CP/CPS documents are not in English, then the portions of > those documents pertaining to verification of the certificate > subscriber must be translated into English."
Done... https://wiki.mozilla.org/CA:Information_checklist#Verification_Policies_and_Practices now says: "If the CP/CPS documents are not in English, then the CP/CPS documents that are relevant to the root inclusion request must be translated into English." Also updated https://wiki.mozilla.org/CA:Recommended_Practices#Publicly_Available_CP_and_CPS to add the second sentence to the 3rd bullet point: "The CP/CPS should be available in an English version. The non-English version may be authoritative (as that's the working language of the CA) but the CA is responsible for ensuring that the translation is not materially different from the authoritative version of the document." Note that this is also on our list of things to add directly to the policy: https://github.com/mozilla/pkipolicy/issues/6 > > This makes me think that the expectation is not that the full doc is > in English and that a one-time translation is acceptable. > > I don't think we should hold it against GDCA that Mozilla's > requirements have apparently changed. Fair enough. Before asking folks to review the documents again... Would a representative of GDCA please confirm that the following translations are correct to the best of their knowledge? Please also confirm that these documents match the corresponding version of the document in Chinese (no material differences). CP: https://bugzilla.mozilla.org/attachment.cgi?id=8805543 CPS: https://bug1128392.bmoattachments.org/attachment.cgi?id=8805545 EV CP: https://bugzilla.mozilla.org/attachment.cgi?id=8805546 EV CPS: https://bug1128392.bmoattachments.org/attachment.cgi?id=8805547 Thanks, Kathleen _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
