Re: CRL Issuance Frequency for non-published CRLs

2022-09-28 Thread Ben Wilson
Thanks, Clint. Mozilla will be following this same language in MRSP 4 for populating the CCADB full-CRL fields. "CA operators must do this within 7 days of such intermediate CA issuing its first certificate." Thanks again, Ben On Wed, Sep 28, 2022 at 9:38 AM Clint Wilson wrote: > Hello all, > >

Re: CRL Issuance Frequency for non-published CRLs

2022-09-28 Thread 'Clint Wilson' via dev-security-policy@mozilla.org
Hello all, I just wanted to quickly mention that the Apple Root Program Policy has been updated, hopefully in a way that makes the expectations clear with regards to the Full CRL disclosure requirements and their interaction with both dormant CAs (i.e. those that have never issued a certificate