RE: DRAFT January 2020 CA Communication

2019-12-19 Thread Jeremy Rowley via dev-security-policy
Should anything be mentioned about the allowed algorithms? That's the largest change to the policy and confirming the AlgorithmIdentifiers in each case may take some time. -Original Message- From: dev-security-policy On Behalf Of Wayne Thayer via dev-security-policy Sent: Thursday,

Re: DRAFT January 2020 CA Communication

2019-12-19 Thread Ryan Sleevi via dev-security-policy
On Thu, Dec 19, 2019 at 12:10 PM Wayne Thayer via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > All, > > I've drafted a new email and survey that I plan to send to all CAs in the > Mozilla program in early January. it focuses on compliance with the new > (2.7) version of

Re: Incident Reporting Guidance

2019-12-19 Thread Wayne Thayer via dev-security-policy
Having received no comments on this proposal, I went ahead and added it to the wiki [1]. - Wayne [1] https://wiki.mozilla.org/CA/Responding_To_An_Incident#Incident_Report On Wed, Dec 11, 2019 at 4:45 PM Wayne Thayer wrote: > While thinking about different ways to solve the problem of

Re: Audit Letter Validation (ALV) on intermediate certs in CCADB

2019-12-19 Thread Wayne Thayer via dev-security-policy
On Tue, Nov 26, 2019 at 6:10 PM Nick Lamb via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On Mon, 25 Nov 2019 14:12:46 -0800 > Kathleen Wilson via dev-security-policy > wrote: > > > CAs should have been keeping track of and resolving their own known > > problems in

DRAFT January 2020 CA Communication

2019-12-19 Thread Wayne Thayer via dev-security-policy
All, I've drafted a new email and survey that I plan to send to all CAs in the Mozilla program in early January. it focuses on compliance with the new (2.7) version of our Root Store Policy. I will appreciate your review and feedback on the draft: