Then we go back to: what's the point of becoming a globally-recognized CA if you are not allowed by law to recognize as legal the English language version?
Some user from the other part of the world might not know YOUR local language, but they are more likely to know English. A local country can simply issue legislation that XYZ Certification Authority with certificate public key ##########[...]#### is mandatory to be recognized by everyone in the country and that's that. You don't really need Mozilla / Microsoft / Apple to accept you as CA to operate. You have to earn their (and their user's) trust. One critical step to earning this trust is having legally-binding, easy to understand documents. ~~~~ Adrian R. On Thursday, 5 April 2018 12:38:12 UTC+3, Buschart, Rufus wrote: > I would like to suggest to add the clause "if legally allowed" at the end. I > had some crazy discussions with colleagues in Russia and Québec about > documents in English. Also it should be added that the audit information must > be publicly available in the Internet. The whole sentence would be: > > "The audit information MUST be publicly available in the Internet. An English > version MUST be provided. The English version MUST be authoritative if > legally possible under the jurisdiction of the CAs home country." > _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
