RE: .tg Certificates Issued by Let's Encrypt

2017-11-16 Thread Robin Alden via dev-security-policy
Hi Kathleen, Comodo issued a number of certificates to .tg domains during the period of interest. We see a history of applications for .gouv.tg certificates which we had been previously been rejecting and suddenly in the period of interest we issued them - which might support the notion of

Re: DigiCert/Symantec updates

2017-11-16 Thread Kathleen Wilson via dev-security-policy
This hasn't shown up in Google Groups for me yet, so please see the message below from Jeremy. Note that there is a bug (https://bugzilla.mozilla.org/show_bug.cgi?id=1412993) and a Google support ticket open for this problem of messages that are posted via Google Groups not showing up in Goog

Re: .tg Certificates Issued by Let's Encrypt

2017-11-16 Thread Kathleen Wilson via dev-security-policy
Thank you to everyone who has been looking into the .tg Registry problem and providing valuable information. I greatly appreciate all of your efforts! I have updated the related action item in the November CA Communication to reflect the dates that we believe the .tg Registry was having probl

Re: DRAFT November 2017 CA Communication

2017-11-16 Thread Kathleen Wilson via dev-security-policy
On 11/13/17 1:52 PM, Kathleen Wilson wrote: Link to November 2017 CA Communication on wiki page: https://wiki.mozilla.org/CA/Communications#November_2017_CA_Communication Direct link to the survey: https://ccadb-public.secure.force.com/mozillacommunications/CACommunicationSurveySample?CACommunic

Re: DigiCert/Symantec updates

2017-11-16 Thread Nick Lamb via dev-security-policy
4.1 Further to Gerv's question in the bug, I see that Digicert have not actually enumerated the set of issued certificates which are affected. Are you confident that if it became necessary you can do this? I recommend doing this and reporting the count even if not asked to actually list all the

Re: DRAFT November 2017 CA Communication

2017-11-16 Thread Kathleen Wilson via dev-security-policy
On 11/16/17 10:04 AM, Kathleen Wilson wrote: On 11/13/17 1:52 PM, Kathleen Wilson wrote: Link to November 2017 CA Communication on wiki page: https://wiki.mozilla.org/CA/Communications#November_2017_CA_Communication Direct link to the survey: https://ccadb-public.secure.force.com/mozillacommuni