Re: Bugzilla/wiki integration broken

2017-10-30 Thread Kathleen Wilson via dev-security-policy
On Saturday, October 28, 2017 at 5:07:51 PM UTC-7, Kathleen Wilson wrote: > All, > > Mozilla's Bugzilla system was updated a couple of days ago, and now the > Bugzilla/wiki integration is not working very well. So you will notice some > changes in the following wiki pages: > >

Re: ETSI audits not listing audit periods

2017-10-30 Thread Kathleen Wilson via dev-security-policy
On Monday, October 30, 2017 at 5:02:08 PM UTC-7, Buschart, Rufus wrote: > Our ETSI audit report > (https://www.siemens.com/corp/pool/pki/siemens_etsi.pdf) states: > > > An audit of the certification service, documented in a report, provided > > evidence that the requirements of the following >

RE: ETSI audits not listing audit periods

2017-10-30 Thread Buschart, Rufus via dev-security-policy
Our ETSI audit report (https://www.siemens.com/corp/pool/pki/siemens_etsi.pdf) states: > An audit of the certification service, documented in a report, provided > evidence that the requirements of the following > specification have been fulfilled. The audit was conducted on 22th - 24th >

Re: ETSI audits not listing audit periods

2017-10-30 Thread Kathleen Wilson via dev-security-policy
On Monday, October 30, 2017 at 2:59:31 PM UTC-7, Ryan Sleevi wrote: > > I would expect that it would be incumbent on the CABs and the CAs providing > EN 319 411-1 certificates to help the community better understand the level > of assurance provided. That is, I think those supporting the

Re: ETSI audits not listing audit periods

2017-10-30 Thread Ryan Sleevi via dev-security-policy
On Mon, Oct 30, 2017 at 3:50 PM, Kathleen Wilson via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > > How do we get all auditors to start meeting our audit statement > requirements? > > Why haven't all included CAs communicated these requirements to their > auditors? > > Why