Am Dienstag, 15. August 2017 16:21:03 UTC+2 schrieb Gervase Markham: > On 14/08/17 16:44, Arno Fiedler wrote: > > fulfilled. On 20-07-17 Mozilla asked D-TRUST for clarification, due > > to the holiday period this message reached us on 07-08-17, AF > > answered on 08-08-17 > > I was going to complain about this but, re-reviewing the CCADB Common > Policy[0], it says: > > "Notification of security and audit-related issues will be emailed to > all POCs and the email aliases; CAs are advised to supply sufficient > POCs that will enable them to respond to an issue promptly." > > As I only sent the notification to Arno alone (the primary PoC) then I > have to take responsibility for not providing sufficient notification. > My apologies. > > Gerv > > [0] http://ccadb.org/policy
We really genuinely regret the delayed reaction, today we add the non-personal contact email "rootsto...@d-trust.net" that should improve the process. Arno _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
