It’s hard to know how credible the allegations are, at least one of the people taking part has been active on Bugzilla in a very heated manner but their latest comments have been more civil. One of the things that worry me the most is the allegations of NDAs or similar to silence (past) employees because it reminds me of the legal threat sent to Sectigo over Tim Callans comments on Bugzilla.
While I respect the right of DigiCert to protect business secrets and to protect confidentiality I am worried that they are also preventing people to speak up against misconduct. Zacharias On Sun, 15 Jun 2025 at 15:34, Mike Shaver <[email protected]> wrote: > On Sat, Jun 14, 2025 at 11:01 PM Matt Palmer <[email protected]> wrote: > >> On Fri, Jun 13, 2025 at 02:38:23PM -0700, '[email protected]' >> via [email protected] wrote: >> > program. As outlined in the DigiCert Ombudsman SOP in bug >> > <https://bugzilla.mozilla.org/show_bug.cgi?id=1950144>* 1950144 >> > <https://bugzilla.mozilla.org/show_bug.cgi?id=1950144>*, comment 55 >> > <https://bugzilla.mozilla.org/show_bug.cgi?id=1950144#c55>, this case >> is >> > following the documented next steps. >> >> Does anyone else think it slightly odd that the most authoritative >> documentation on the existence of this Ombudsperson program and how it >> works -- including requirements on those who might wish to avail >> themselves of its remedies -- is buried 55 comments down in a Bugzilla >> issue? All it needs is a sign saying "Beware of the leopard". > > > Yeah, I don’t know why DigiCert isn’t advertising this on their site > somewhere, if they think it’s really important. > > Mike > > -- > You received this message because you are subscribed to the Google Groups " > [email protected]" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion visit > https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CADQzZqv2gwfNXJb6UyeuByrx69_Ly0QCLQaLgJw-NYzfKHng3Q%40mail.gmail.com > <https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CADQzZqv2gwfNXJb6UyeuByrx69_Ly0QCLQaLgJw-NYzfKHng3Q%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAKDW-UdtNj5Pxw7LN_F76abOBCK_7RXbNV%2BC2seEJBQD%3DXbuUQ%40mail.gmail.com.
