Re: About upcoming limits on trusted certificates

On Wed, Mar 4, 2020 at 11:48 AM Nick Lamb wrote: > On Tue, 3 Mar 2020 13:27:59 -0700 > Wayne Thayer via dev-security-policy > wrote: > > > I'd like to ask for input from the community: is this a requirement > > that we should add to the Mozilla policy at this time (effective > > September 1,

RE: About upcoming limits on trusted certificates

Hi Clint, The content of your email, the blog post and the Apple root policy all say something a little different and may leave some room for interpretation by the CAs. As it stands, things are a bit confused. Here's why: Your mail is a little light on the details. While you say this is an

Re: Auditing of CA facilities in lockdown because of an environmental disaster/pandemic

Thanks Arvid! I think these are good starting points for discussion! On Wed, Mar 4, 2020 at 8:48 AM Arvid Vermote wrote: > When I initially raised the topic I had two things in mind: > > -What if a facility can’t be audited? > > -If main key management facilities are down can

Re: About upcoming limits on trusted certificates

On Tue, 3 Mar 2020 13:27:59 -0700 Wayne Thayer via dev-security-policy wrote: > I'd like to ask for input from the community: is this a requirement > that we should add to the Mozilla policy at this time (effective > September 1, 2020)? If Mozilla adds this as a policy requirement it should

RE: Auditing of CA facilities in lockdown because of an environmental disaster/pandemic

When I initially raised the topic I had two things in mind: -What if a facility can’t be audited? -If main key management facilities are down can WebPKI CA meet SSLBR 4.9.1.2? As for the inability to audit, a few things come to mind based on the previous shared thoughts: -