dev-security-policy  

Messages by Thread

• Descriptive vs. normative language in CP/CPS documentation 'Ben Wilson' via [email protected]
  • Re: Descriptive vs. normative language in CP/CPS documentation 'Aaron Gable' via [email protected]
  • Re: Descriptive vs. normative language in CP/CPS documentation 'Ben Wilson' via [email protected]
  • Fwd: Descriptive vs. normative language in CP/CPS documentation 'Ben Wilson' via [email protected]
• e164.arpa Usage Wayne
  • Re: e164.arpa Usage 'Cynthia Revström' via dev-security-policy
  • Re: e164.arpa Usage 'Tobias S. Josefowitz' via [email protected]
  • Re: e164.arpa Usage 'Cynthia Revström' via dev-security-policy
  • Re: e164.arpa Usage 'Tobias S. Josefowitz' via [email protected]
  • Re: e164.arpa Usage 'Cynthia Revström' via dev-security-policy
• MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs Wayne
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs 'Matthew McPherrin' via [email protected]
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs Michael Stone
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs Wayne
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs Wayne
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs Wayne
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs Wayne
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs 'Rob Stradling' via [email protected]
  • RE: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs 'Roman Fischer' via [email protected]
  • Re: MRSP Intermediate Violations (5.3), Mass Report of 26 Subordinate CAs 'Luis Osses' via [email protected]
• NSS trust-store modification by official FINA Linux certificate client package 'certifikati' via [email protected]
• MRSP 3.1: MRSP Publication and Guidance 'Ben Wilson' via [email protected]
• MRSP 3.1: Planned Effective Date of 7/1/2026 'Ben Wilson' via [email protected]
• Notice of Intent to Approve SECOM Trust Systems Co., Ltd. Root Inclusion Requests 'Ben Wilson' via [email protected]
• Notice of Intent to Approve Telia's Root Inclusion Requests 'Ben Wilson' via [email protected]
• MRSP 3.1: Results of CA Communication and Survey 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Results of CA Communication and Survey 'Ben Wilson' via [email protected]
• Microsoft MX servers use certificate chaining to obsolete DigiCert Global Root CA Hanno Böck
  • Re: Microsoft MX servers use certificate chaining to obsolete DigiCert Global Root CA 'Q Misell' via [email protected]
  • Re: Microsoft MX servers use certificate chaining to obsolete DigiCert Global Root CA 'Martijn Katerbarg' via [email protected]
  • Re: Microsoft MX servers use certificate chaining to obsolete DigiCert Global Root CA 'Q Misell' via [email protected]
• MozillaIntermediateCertsCSVReport — blank line after -----BEGIN CERTIFICATE----- in 18 Amazon S-series rows Anupama M
  • Re: MozillaIntermediateCertsCSVReport — blank line after -----BEGIN CERTIFICATE----- in 18 Amazon S-series rows 'Trevoli Ponds-White' via [email protected]
  • Re: MozillaIntermediateCertsCSVReport — blank line after -----BEGIN CERTIFICATE----- in 18 Amazon S-series rows 'Trevoli Ponds-White' via [email protected]
  • Re: MozillaIntermediateCertsCSVReport — blank line after -----BEGIN CERTIFICATE----- in 18 Amazon S-series rows Anupama M
• Websites Trust Bit Removals for 2027 'Ben Wilson' via [email protected]
  • Re: Websites Trust Bit Removals for 2027 'Rob Stradling' via [email protected]
  • Re: Websites Trust Bit Removals for 2027 'Ben Wilson' via [email protected]
• MRSP 3.1: Draft CA Communication and Survey 'Ben Wilson' via [email protected]
• MRSP 3.1: Issue #299: Mass Revocation Planning Audits 'Ben Wilson' via [email protected]
• MRSP 3.1: Issue #291: Change in Ownership or Control 'Ben Wilson' via [email protected]
• MRSP 3.1: Issue #s 292 and 293: CA Operational Reporting and Policy Alignment 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 292 and 293: CA Operational Reporting and Policy Alignment 'Aaron Gable' via [email protected]
  • Re: MRSP 3.1: Issue #s 292 and 293: CA Operational Reporting and Policy Alignment 'Ben Wilson' via [email protected]
• MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements Mike Shaver
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 'Aaron Gable' via [email protected]
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 大野文彰
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 大野文彰（ONO Fumiaki）
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 294, 296, 297, and 298: Audit-related Improvements 大野文彰（ONO Fumiaki）
• MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation Wayne
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Aaron Gable' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Aaron Gable' via [email protected]
  • RE: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Roman Fischer' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • RE: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Roman Fischer' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Trevoli Ponds-White' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Martijn Katerbarg' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Trevoli Ponds-White' via [email protected]
  • RE: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Roman Fischer' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Ben Wilson' via [email protected]
  • Re: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Trevoli Ponds-White' via [email protected]
  • RE: MRSP 3.1: Issue #s 282 and 295: CP/CPS Documentation 'Roman Fischer' via [email protected]
• MRSP 3.1: Candidate Issues 'Ben Wilson' via [email protected]
• Approval of Cybertrust Japan SecureSign Root CA16 'Ben Wilson' via [email protected]
• Questions Regarding the Use of the id-ad-caIssuers Extension under the BR！ Awel Dia
  • Re: Questions Regarding the Use of the id-ad-caIssuers Extension under the BR！ Arabella Barks
• EJBCA - Open MPIC Issues and Impacted CAs Wayne
  • Re: EJBCA - Open MPIC Issues and Impacted CAs Henry Birge-Lee
  • Re: EJBCA - Open MPIC Issues and Impacted CAs 'Dimitris Zacharopoulos' via [email protected]
  • Re: EJBCA - Open MPIC Issues and Impacted CAs 'Dimitris Zacharopoulos' via [email protected]
  • Re: EJBCA - Open MPIC Issues and Impacted CAs 'Fabien Hochstrasser' via [email protected]
• CAA Checking: CNAME Target Returns SERVFAIL Awel Dia
  • Re: CAA Checking: CNAME Target Returns SERVFAIL Henry Birge-Lee
  • Re: CAA Checking: CNAME Target Returns SERVFAIL Awel Dia
• Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786 Michael Stone
  • Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786 'Aaron Gable' via [email protected]
  • Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786 Henry Birge-Lee
  • Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786 Michael Stone
  • Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786 Peter Bowen
  • Re: Clarification on CAA NXDOMAIN handling: RFC 8659 vs. BR / Bug 1695786 Michael Stone
• Irregular RSA Exponents Wayne
  • Re: Irregular RSA Exponents Hanno Böck
  • Re: Irregular RSA Exponents David Adrian
  • Re: Irregular RSA Exponents 'Bas Westerbaan' via [email protected]
• Revocation method is missing by subCA Yuwei HAN (hanyuwei70)
  • Re: Revocation method is missing by subCA 'Rob Stradling' via [email protected]
  • Re: Revocation method is missing by subCA Hanno Böck
  • Re: Revocation method is missing by subCA Yuwei HAN (hanyuwei70)
  • Re: Revocation method is missing by subCA 'Aaron Gable' via [email protected]
  • Re: Revocation method is missing by subCA 'Aaron Gable' via [email protected]
  • Re: Revocation method is missing by subCA Yuwei HAN (hanyuwei70)
• Understanding accounturi handling across manual and ACME issuance (RFC 8657 Section 5.3) 大野 文彰
  • Re: Understanding accounturi handling across manual and ACME issuance (RFC 8657 Section 5.3) 'Aaron Gable' via [email protected]
  • RE: Understanding accounturi handling across manual and ACME issuance (RFC 8657 Section 5.3) 大野 文彰
• Recent incidents regarding recording Baseline Requirements version 'Aaron Gable' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version Watson Ladd
  • Re: Recent incidents regarding recording Baseline Requirements version 'Aaron Gable' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version Dexter Castor Döpping
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version 'Ben Wilson' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version 'Gurleen Grewal' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version Watson Ladd
  • Re: Recent incidents regarding recording Baseline Requirements version 'Ben Wilson' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version 'Aaron Gable' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version 'Trevoli Ponds-White' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version 'Aaron Gable' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version 'Aaron Gable' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version 'Trevoli Ponds-White' via [email protected]
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version Ryan Hurst
  • Re: Recent incidents regarding recording Baseline Requirements version Watson Ladd
• Question about a Microsoft Root Program reuqirement Peter Mate Erdosi
  • Re: Question about a Microsoft Root Program reuqirement 'Ben Wilson' via [email protected]
• Removal of 'non-disclosable intermediate certificates' language from Mozilla CA Wiki 'Ben Wilson' via [email protected]
• Public Discussion: Approval of JPRS as an Externally-Operated Subordinate CA under SECOM Root 'Ben Wilson' via [email protected]
  • Re: Public Discussion: Approval of JPRS as an Externally-Operated Subordinate CA under SECOM Root 'Ben Wilson' via [email protected]
• Question on repurposing PublicCAs to PrivateCAs Arabella Barks
• Regarding the LiteSSL Certificate Issuance Authentication Vulnerability Roger M Lambdin
  • Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability Rollin Yu
  • Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability Roger M Lambdin
  • Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability Roger M Lambdin
  • Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability Rollin Yu
  • Re: Regarding the LiteSSL Certificate Issuance Authentication Vulnerability Rollin Yu
• HTTP request blocking by CAs for CRL, CPS, AIA caIssuers Dexter Castor Döpping
  • Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers 'Peter Gutmann' via [email protected]
  • Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers Hanno Böck
  • Re: [External Sender] Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers 'Adriano Santoni' via [email protected]
  • Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers 'Roman Fischer' via [email protected]
  • Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers Hanno Böck
  • Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers Matt Palmer
  • Re: HTTP request blocking by CAs for CRL, CPS, AIA caIssuers 'Roman Fischer' via [email protected]
• https://opensource.apple.com/source/security_certificates/ is 404 Arabella Barks
  • Re: https://opensource.apple.com/source/security_certificates/ is 404 'Rob Stradling' via [email protected]
• Approval of Microsec's e-Szigno TLS Root CA 2023 'Ben Wilson' via [email protected]
• Reflections on 2025 and Areas of Focus for 2026 'Ben Wilson' via [email protected]
• Ongoing CT Logging Mistakes by CAs Andrew Ayer
  • Re: Ongoing CT Logging Mistakes by CAs Andrew Ayer
  • Re: Ongoing CT Logging Mistakes by CAs Jeremy Rowley
  • Re: Ongoing CT Logging Mistakes by CAs Andrew Ayer
  • Re: Ongoing CT Logging Mistakes by CAs Jeremy Rowley
  • Re: Ongoing CT Logging Mistakes by CAs 'Rob Stradling' via [email protected]
  • Re: Ongoing CT Logging Mistakes by CAs Filippo Valsorda
  • Re: Ongoing CT Logging Mistakes by CAs Alvin Wang
• Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? Andrew Ayer
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? Arabella Barks
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? Andrew Ayer
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? Andrew Ayer
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? 'Rob Stradling' via [email protected]
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? Chya-Hung Tsai
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? Arabella Barks
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? 'Aaron Gable' via [email protected]
  • Re: Why didn’t apple trust Wyvern2027h1 and sphinx2027h1 ctlog? 'Aaron Gable' via [email protected]
• Updated Value Statement Wiki Guidance 'Ben Wilson' via [email protected]
• Subject: Confusion/questions regarding SC-088v3 Arabella Barks
  • Re: Subject: Confusion/questions regarding SC-088v3 'Aaron Gable' via [email protected]
  • Re: Subject: Confusion/questions regarding SC-088v3 Arabella Barks
  • Re: Subject: Confusion/questions regarding SC-088v3 'Tobias S. Josefowitz' via [email protected]
  • Re: Subject: Confusion/questions regarding SC-088v3 'Dimitris Zacharopoulos' via [email protected]
• New CA Wiki Page: Summary of Root Inclusion Process and Evaluation Criteria 'Ben Wilson' via [email protected]
• Notification of acquisition of VikingCloud’s Digital Certificate Business 'Rebecca Kelley' via [email protected]
  • Re: Notification of acquisition of VikingCloud’s Digital Certificate Business 'Rebecca Kelley' via [email protected]
  • Re: Notification of acquisition of VikingCloud’s Digital Certificate Business 'Rebecca Kelley' via [email protected]
• New Lists of Mozilla Root CAs 'Ben Wilson' via [email protected]
  • Re: New Lists of Mozilla Root CAs Filippo Valsorda
  • Re: New Lists of Mozilla Root CAs 'Jan Schaumann' via [email protected]
  • Re: New Lists of Mozilla Root CAs Ronald Crane
• Updated Mozilla CT Log Policy 'Ben Wilson' via [email protected]
  • Re: Updated Mozilla CT Log Policy Suchan Seo
  • Re: Updated Mozilla CT Log Policy 'David Adrian' via [email protected]
  • Re: Updated Mozilla CT Log Policy Joe DeBlasio
• No master password on Android Dale Newton
  • Re: No master password on Android Dale Newton
  • Re: No master password on Android 'Phil Porada' via [email protected]
  • Re: No master password on Android Ronald Crane
• Thoughts on Advancing ARI Adoption and Its Implementation in ACME Clients Arabella Barks
• The impact of MitM attack Jin Tong
  • Re: The impact of MitM attack Schoo W3
  • Re: The impact of MitM attack Henry Birge-Lee
  • Re: The impact of MitM attack Jin Tong
• Updated Root and Intermediate CA Reports on Mozilla CA Wiki 'Ben Wilson' via [email protected]
• SHECA:TLS certificate key generation online Lambert Evans
  • Re: SHECA:TLS certificate key generation online Alvin Wang
  • Re: SHECA:TLS certificate key generation online Alvin Wang
  • Re: SHECA:TLS certificate key generation online Ryan Hurst
  • Re: SHECA:TLS certificate key generation online Alvin Wang
  • Re: SHECA:TLS certificate key generation online Alvin Wang
  • Re: SHECA:TLS certificate key generation online Bastian Blank

• Earlier messages