On Tuesday, August 15, 2017 at 3:53:06 PM UTC-7, Jonathan Rudenberg wrote: > It would be useful to know when and through what channel the CA learned about > each of the problems listed. (problem report via email at date/time; > known/unresolved issue since date; mailing list post at date/time; when I saw > this bug; etc.)
I agree that will be useful, but my goal with this is to educate the CA about what we expect going forward. I want to foster open communication with CAs, so I will ask for this information, but I will not use this information against the CA. Kathleen _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
