Re: InfoCert Acquisition of Camerfirma

2019-02-07 Thread Wayne Thayer via dev-security-policy
I just noticed that my response to David's question was only sent to his (nobody@nowhere.invalid) reply address and not to the list. On Wed, Sep 26, 2018 at 4:41 PM David E. Ross via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On 9/26/2018 3:21 PM, Wayne Thayer wrote: >

Re: InfoCert Acquisition of Camerfirma

2018-09-26 Thread David E. Ross via dev-security-policy
On 9/26/2018 3:21 PM, Wayne Thayer wrote: > I've held this discussion open for much longer than 3 weeks due to the > qualified audit reports that were received from Camerfirma. Since no > objections to the acquisition have been raised and the audit issues are > being discussed separately [1][2], I

Re: InfoCert Acquisition of Camerfirma

2018-09-26 Thread Wayne Thayer via dev-security-policy
I've held this discussion open for much longer than 3 weeks due to the qualified audit reports that were received from Camerfirma. Since no objections to the acquisition have been raised and the audit issues are being discussed separately [1][2], I would like to close this discussion and the

Re: InfoCert Acquisition of Camerfirma

2018-07-30 Thread Wayne Thayer via dev-security-policy
On Wed, Jul 18, 2018 at 1:56 PM Wayne Thayer wrote: > I would like to begin a 3-week public discussion period for InfoCert's > acquisition of Camerfirma [1] as described in section 8.1 of the Mozilla > Root Store Policy. I believe that the intent of our policy in this scenario > is to identify

Re: InfoCert Acquisition of Camerfirma

2018-07-18 Thread Wayne Thayer via dev-security-policy
I would like to begin a 3-week public discussion period for InfoCert's acquisition of Camerfirma [1] as described in section 8.1 of the Mozilla Root Store Policy. I believe that the intent of our policy in this scenario is to identify and consider any risks introduced by the acquisition of

InfoCert Acquisition of Camerfirma

2018-05-22 Thread Wayne Thayer via dev-security-policy
On Thursday, a representative of AC Camerfirma sent an email informing Mozilla that InfoCert [1] has taken control of Camerfirma. News of the deal was first published on May 4th. [2] Section 8.1 of our policy applies here (quoting version 2.6 draft): If the receiving or acquiring company is new