Re: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-16 Thread Wayne Thayer via dev-security-policy
To close out this discussion, I've gone ahead with the proposed change, including the addition of the requirement that the English language version of the audit statement be an authoritative version: https://github.com/mozilla/pkipolicy/commit/e4cc785367350a46fc839639a28a92bd17d542e3 - Wayne On

Re: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-05 Thread Wayne Thayer via dev-security-policy
It has been pointed out to me that we should seek to create a policy that meets our needs without imposing a requirement for auditors to adopt the English language. For the CP/CPS, we address this concern by requiring a translation that "...must match the current version..." I am of the opinion

Re: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-05 Thread Adrian R. via dev-security-policy
Then we go back to: what's the point of becoming a globally-recognized CA if you are not allowed by law to recognize as legal the English language version? Some user from the other part of the world might not know YOUR local language, but they are more likely to know English. A local country

RE: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-05 Thread Buschart, Rufus via dev-security-policy
eek via dev-security-policy Sent: Donnerstag, 5. April 2018 02:49 To: Ryan Hurst; mozilla-dev-security-pol...@lists.mozilla.org Subject: RE: Policy 2.6 Proposal: Require English Language Audit Reports Call me crazy, but for this particular requirement, I think simple sentences might be better. "T

RE: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-04 Thread Tim Hollebeek via dev-security-policy
-security-policy [mailto:dev-security-policy- > bounces+tim.hollebeek=digicert@lists.mozilla.org] On Behalf Of Ryan > Hurst via dev-security-policy > Sent: Wednesday, April 4, 2018 7:19 PM > To: mozilla-dev-security-pol...@lists.mozilla.org > Subject: Re: Policy 2.6 Proposal: Require

Re: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-04 Thread Ryan Hurst via dev-security-policy
> An authoritative English language version of the publicly-available audit > information MUST be supplied by the Auditor. > > it would be helpful for auditors that issue report in languages other than > English to confirm that this won't create any issues. That would address my concern.

Re: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-04 Thread Wayne Thayer via dev-security-policy
On Wed, Apr 4, 2018 at 2:46 PM, Ryan Hurst via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On Wednesday, April 4, 2018 at 1:58:35 PM UTC-7, Wayne Thayer wrote: > > Mozilla needs to be able to read audit reports in the English language > > without relying on machine

Re: Policy 2.6 Proposal: Require English Language Audit Reports

2018-04-04 Thread Ryan Hurst via dev-security-policy
On Wednesday, April 4, 2018 at 1:58:35 PM UTC-7, Wayne Thayer wrote: > Mozilla needs to be able to read audit reports in the English language > without relying on machine translations that may be inaccurate or > misleading. > > I suggest adding the following sentence to the end of policy section