All, A quick update: I inadvertently merged PR #237 <https://github.com/mozilla/www.ccadb.org/pull/237> today rather than waiting until September 4, and the updated ccadb.org/resources page is now live.
Please continue to review the page and provide comments or suggestions for further improvements. As always, we are happy to continue improving the page based on community feedback. Cheers and thanks, Ben On Fri, Aug 21, 2026 at 6:41 AM CCADB Public <[email protected]> wrote: > All, > > To improve content readability and overall usability, we plan to update > ccadb.org/resources by merging > <https://github.com/mozilla/www.ccadb.org/pull/237>*PR#237* > <https://github.com/mozilla/www.ccadb.org/pull/237> on September 4, 2026. > To summarize the changes: > > 1) New Page Structure & Organization > > - > > The page is now divided into two distinct sections: "Community > Reports" (general data applicable to the broader ecosystem) and "Root Store > Information" (specific policies, contacts, and reports for each store). > - > > A guidance section has been added to the "Root Store Information" > area. It warns against repurposing specific root stores for unintended use > cases and encourages communities to curate their own stores. > > > 2) Additions to Root Store Information > > - > > Dedicated sections for Apple and Cisco have been added. Previously, > only Microsoft, Mozilla, and Google Chrome were explicitly listed. > - > > Contact email addresses are now listed for every Root Store Operator > (Apple, Cisco, Chrome, Microsoft, and Mozilla). > - > > New tables provide CSV downloads specifically for individual Root > Store PKI use cases to include unique Root Store constraints. > > > 3) Expanded Data & Reporting > > - > > A new "Use-case Specific Reports" table has been introduced. This > expands coverage beyond just TLS and S/MIME to include Code Signing, > Document Signing, Encrypting File System, Timestamping, and multiple IP > Security configurations. > - > > Two reports have been added: "Accepted Roots for Production CT Logs" > and "Accepted Roots for Test CT Logs". These reports attempt to simplify > some aspects of log management for CT Log Operators. > - > > A report link for "Disclosed Domain Control Validation Practices" has > been added. This conveys all reported validation methods available under a > given root CA certificate’s hierarchy as disclosed in the CCADB. > > > 4) Removals & Clean-up > > - > > The legacy top-level headers for "Code Signing" (which only listed > Microsoft) and "Email" (which only listed Mozilla) have been removed. These > use cases are now integrated into the general "Community Reports" section > and the respective Root Store sections to provide a more consistent view. > > > We invite any feedback and like everything on ccadb.org we’re happy to > continue iterating to improve the page. > > Best regards, > > -CCADB Support > > -- > You received this message because you are subscribed to the Google Groups > "CCADB Public" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion visit > https://groups.google.com/a/ccadb.org/d/msgid/public/b2752e36-4623-4658-8bd1-838667161522n%40ccadb.org > <https://groups.google.com/a/ccadb.org/d/msgid/public/b2752e36-4623-4658-8bd1-838667161522n%40ccadb.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "CCADB Public" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/ccadb.org/d/msgid/public/CA%2B1gtaYi%2B3b-gaJKteByAn%2B-3A2XTYg%3DQ0OEKpDQtnUhzH%2ByAQ%40mail.gmail.com.
