Re: Second Discussion of CFCA Root Inclusion Request

2015-02-04 Thread Kathleen Wilson
Thanks to all of you who reviewed and commented on this request from CFCA to include the “CFCA EV ROOT” root certificate, turn on the websites trust bit, and enable EV treatment. I am closing this discussion, and I will recommend approval in the bug. https://bugzilla.mozilla.org/show_bug.cgi?i

Re: Question about BR Commitment to Comply

2015-02-04 Thread Kurt Roeckx
On 2015-02-04 14:55, Man Ho (Certizen) wrote: But making a statement in CP/CPS means that CA "has already complied" with the "latest version" of BRs. In other words, CA has already complied with all potential changes of BRs at all time. Such statement could be a false statement when the "latest v

Re: Question about BR Commitment to Comply

2015-02-04 Thread Man Ho (Certizen)
On 2/4/2015 6:08 PM, Gervase Markham wrote: > They are not refusing to comply, they > just want to change the location of the compliance statement. In practice, Webtrust BR audit report requires the CA's assertion of compliance with BRs. It is a proper place to make the compliance statement becau

Re: Question about BR Commitment to Comply

2015-02-04 Thread Gervase Markham
On 28/01/15 22:49, Kathleen Wilson wrote: > I have been asked if a CA can have their Webtrust audit statement > indicate their commitment to comply with the BRs, rather than putting > the commitment to comply statement in the CP/CPS. > Here are the reason: > > 1) We are not a member of CAB/Forum