Re: Draft Security Blog about v2.5 of Root Store Policy

2017-09-07 Thread Kathleen Wilson via dev-security-policy
On Thursday, September 7, 2017 at 1:23:17 AM UTC-7, Buschart, Rufus wrote: > I have a question regarding the meaning of: > > > * The latest versions of the WebTrust and ETSI audit criteria are now > > required, and auditors are required to be appropriately qualified. I will delete that sentence

RE: Draft Security Blog about v2.5 of Root Store Policy

2017-09-07 Thread Buschart, Rufus via dev-security-policy
ozilla-dev-security-pol...@lists.mozilla.org Subject: Draft Security Blog about v2.5 of Root Store Policy All, Here is a draft of a security blog about version 2.5 of Mozilla's Root Store Policy. I will greatly appreciate constructive feedback about it. Thanks, Kathleen == Mozilla Releases Versi

Re: Draft Security Blog about v2.5 of Root Store Policy

2017-09-06 Thread David E. Ross via dev-security-policy
On 9/6/2017 11:22 AM, Kathleen Wilson wrote [in part]: > * Our policy on root certificates being transferred from one > organization or location to another has been updated and included in > the main policy. Trust is not transferable; Mozilla will not > automatically trust the purchaser of a root

Draft Security Blog about v2.5 of Root Store Policy

2017-09-06 Thread Kathleen Wilson via dev-security-policy
All, Here is a draft of a security blog about version 2.5 of Mozilla's Root Store Policy. I will greatly appreciate constructive feedback about it. Thanks, Kathleen == Mozilla Releases Version 2.5 of Root Store Policy == Recently, Mozilla released version 2.5 of our Root Store Policy, which