Re: Unretrievable CPS documents listed in CCADB

2019-05-04 Thread Matt Palmer via dev-security-policy
On Sat, May 04, 2019 at 11:11:43AM +, Man Ho via dev-security-policy wrote: > I could be wrong, but some browsers (IE/Chrome) seems to cache > downloaded PDF file and display the cache file if the filename is the > same. If it's true, end user may be actually reading an outdated PDF file.

Re: Unretrievable CPS documents listed in CCADB

2019-05-04 Thread Man Ho via dev-security-policy
I could be wrong, but some browsers (IE/Chrome) seems to cache downloaded PDF file and display the cache file if the filename is the same. If it's true, end user may be actually reading an outdated PDF file. - Man Ho On 04-May-19 3:18 AM, Wayne Thayer via dev-security-policy wrote: > A

RE: Unretrievable CPS documents listed in CCADB

2019-05-03 Thread Ben Wilson via dev-security-policy
That approach could work. From: Wayne Thayer Sent: Friday, May 3, 2019 1:19 PM To: Ben Wilson Cc: Andrew Ayer ; Corey Bonnell ; mozilla-dev-security-pol...@lists.mozilla.org Subject: Re: Unretrievable CPS documents listed in CCADB On Fri, May 3, 2019 at 8:36 AM Ben Wilson via dev

Re: Unretrievable CPS documents listed in CCADB

2019-05-03 Thread Wayne Thayer via dev-security-policy
rying to identify the version applicable to a specific certificate. > -Original Message- > From: dev-security-policy > On Behalf Of Andrew Ayer via dev-security-policy > Sent: Thursday, May 2, 2019 8:16 PM > To: mozilla-dev-security-pol...@lists.mozilla.org > Subject: Re: Unr

Re: Unretrievable CPS documents listed in CCADB

2019-05-03 Thread Jakob Bohm via dev-security-policy
In other words, you should look at when the certificate was issued and then figure out which CPS is applicable. -Original Message- From: dev-security-policy On Behalf Of Andrew Ayer via dev-security-policy Sent: Thursday, May 2, 2019 8:16 PM To: mozilla-dev-security-pol...@lists.mozilla.org Subject

RE: Unretrievable CPS documents listed in CCADB

2019-05-03 Thread Ben Wilson via dev-security-policy
-dev-security-pol...@lists.mozilla.org Subject: Re: Unretrievable CPS documents listed in CCADB On Thu, 2 May 2019 18:53:39 -0700 (PDT) Corey Bonnell via dev-security-policy wrote: > As an aside, I noticed that several URLs listed in CCADB are “Legal > Repository” web page URLs that contain

RE: [EXT]Unretrievable CPS documents listed in CCADB

2019-05-03 Thread (RS) Tyler Schroder via dev-security-policy
document over the general repo page. Regards, Tyler -Original Message- From: dev-security-policy On Behalf Of Corey Bonnell via dev-security-policy Sent: Thursday, May 2, 2019 9:54 PM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: [EXT]Unretrievable CPS documents listed

Re: Unretrievable CPS documents listed in CCADB

2019-05-03 Thread Sándor dr . Szőke via dev-security-policy
2019. május 3., péntek 3:53:49 UTC+2 időpontban Corey Bonnell a következőt írta: > 3209, "Microsec Ltd.", "e-Szigno Class2 CA 2017", > https://static.e-szigno.hu/docs/szsz--fok--sea--EN--v2.8.pdf, 404 > 3211, "Microsec Ltd.", "e-Szigno Class3 CA 2017", >

Re: Unretrievable CPS documents listed in CCADB

2019-05-02 Thread Andrew Ayer via dev-security-policy
On Thu, 2 May 2019 18:53:39 -0700 (PDT) Corey Bonnell via dev-security-policy wrote: > As an aside, I noticed that several URLs listed in CCADB are “Legal > Repository” web page URLs that contain a list of many CP/CPS > documents. My recommendation is to slightly amend CCADB Policy to > require

Unretrievable CPS documents listed in CCADB

2019-05-02 Thread Corey Bonnell via dev-security-policy
Hello, Section 4 of Mozilla Root Store Policy states that CAs are bound by the latest Common CCADB Policy (http://ccadb.org/policy). Section 5 of the Common CCADB Policy specifies the requirements for CAs regarding providing URLs to various documents, such as the CP, CPS, and audit reports. In