On 25/07/17 18:13, Jeremy Rowley wrote: > I would also love to see a more standardized notice mechanism that is > universal to all CAs. Right now, notifying CAs is a pain as some have > different webforms, some use email, and some don't readily tell you how to > contact them about certificate problems.
"Not readily telling" is a BR violation; if you come across a CA like that, please do let us know. The info should be in the CCADB and in the CAs report. I agree it would be nice to have something more standard, but we have what we have right now. Gerv _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy