Re: Mozilla CA Policy 2.3 plan

2016-11-14 Thread Gervase Markham
On 07/11/16 14:08, Gervase Markham wrote: > the 2.3 draft says for some time. Therefore, it seems to me that we > could ship the current draft version as version 2.3 immediately, with > immediate applicability. Diff: > https://github.com/mozilla/pkipolicy/compare/2.2...master We found one

Re: Mozilla CA Policy 2.3 plan

2016-11-08 Thread Gervase Markham
On 07/11/16 20:05, Kathleen Wilson wrote: >> It would be useful if people checked it over to make sure I have not >> made any mistakes in conversion. The original is here, in four pages: >> https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ > > Just one minor

Re: Mozilla CA Policy 2.3 plan

2016-11-07 Thread Gervase Markham
On 07/11/16 14:34, Kurt Roeckx wrote: > In my experience, pointing to a specific section of the BRs causes > problems because things are moved, renumbered and so on. Other changes > in the document also point to specific sections. The BRs now follow RFC 3647, which AIUI specifies the title and

Re: Mozilla CA Policy 2.3 plan

2016-11-07 Thread Kurt Roeckx
On 2016-11-07 15:08, Gervase Markham wrote: https://github.com/mozilla/pkipolicy/compare/2.2...master So one of the changes is that you now have: -issuing certificates), as described in [CA/Browser Forum -Baseline Requirement -