GlobalSign has submitted requests to include a replacement root 
certificate for an already-included root certificate (same public key, 
new expiry date) and to enable it and a second GlobalSign root for EV:

https://bugzilla.mozilla.org/show_bug.cgi?id=406794
https://bugzilla.mozilla.org/show_bug.cgi?id=406796

Kathleen Wilson has been gathering information for these requests; I've 
attached copies of her reports to each of the bugs. Also, GlobalSign 
just completed its WebTrust EV audit and got it published. I've updated 
the GlobalSign entry on the pending list accordingly:

http://www.mozilla.org/projects/security/certs/pending/#GlobalSign

(Note that I checked in GlobalSign-related updates for this list just a 
few minutes ago, so it may take an hour or two for them to show up on 
the site.)

I think we now have all the information we need to start the first 
public comment period for this request, so I'm formally declaring it 
open. Based on prior experience I'm going to fine-tune things a bit and 
set this first comment period at a week long, unless we need more time. 
So my tentative plan is to make a preliminary decision on these requests 
late next week.

Frank

P.S. Note that I think this is the first request for which we're using 
the new information checklist at

http://wiki.mozilla.org/CA:Information_checklist

Thanks go to Kathleen for all her work in collecting the information!

-- 
Frank Hecker
[EMAIL PROTECTED]
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to