On Wed, Jun 26, 2024 at 5:11 PM Ben Wilson <bwil...@mozilla.com> wrote:
> I think it would be good to collect and analyze use-case environments from > subscribers who have requested delayed revocation, if anyone has bandwidth. > I’m not sure that I have bandwidth, but I *am* sure that I don’t know how to go about effectively contacting subscribers to find out the details. There have been a *lot* of such subscribers lately, even if only counting the ones who had their request granted. Do you propose that CAs provide contact information for subscribers who made that request? Sadly, that level of detail is generally not provided in the CA incident report, although my reading of the Mozilla incident policy says that it should be… Mike -- You received this message because you are subscribed to the Google Groups "dev-security-policy@mozilla.org" group. To unsubscribe from this group and stop receiving emails from it, send an email to dev-security-policy+unsubscr...@mozilla.org. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CADQzZqsgtz51gUzjvK3myfq%2BiR4iy5citx%2Buh96JjX%3DuxQPrzw%40mail.gmail.com.