On 14/08/17 16:44, Arno Fiedler wrote: > fulfilled. On 20-07-17 Mozilla asked D-TRUST for clarification, due > to the holiday period this message reached us on 07-08-17, AF > answered on 08-08-17
I was going to complain about this but, re-reviewing the CCADB Common Policy[0], it says: "Notification of security and audit-related issues will be emailed to all POCs and the email aliases; CAs are advised to supply sufficient POCs that will enable them to respond to an issue promptly." As I only sent the notification to Arno alone (the primary PoC) then I have to take responsibility for not providing sufficient notification. My apologies. Gerv [0] http://ccadb.org/policy _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
