Re: Approval of Taiwan CA's Root Inclusion Request

2024-07-08 Thread 'Ben Wilson' via dev-security-policy@mozilla.org
All, We appreciate the feedback and active participation from the community. After careful consideration of all final questions and responses, Mozilla will be proceeding with the inclusion of the TWCA CYBER Root CA (websites trust bit with EV) and TWCA Global Root CA G2 (email trust bit). Thank y

Re: Approval of Taiwan CA's Root Inclusion Request

2024-06-05 Thread Chya-Hung Tsai
Hi Amir, Although we are dedicated to complying with the BRs, unfortunately, incidents of BR violations have still occurred. I believe this community understands that incidents can happen with any CA, but what truly matters is the CA's attitude towards addressing the problems and working to res

Re: Approval of Taiwan CA's Root Inclusion Request

2024-06-05 Thread 'Hao-Chun Li' via dev-security-policy@mozilla.org
Hi Matt, Our replies are inline below. 2024年6月5日水曜日 8:57:16 UTC+8 Matt Palmer: On Tue, Jun 04, 2024 at 04:31:15PM -0700, 'Amir Omidi (aaomidi)' via dev-secur...@mozilla.org wrote: > TWCA has a couple of incidents open for revocation delays. I think until > this CA can show that it can follow

Re: Approval of Taiwan CA's Root Inclusion Request

2024-06-04 Thread 'Hao-Chun Li' via dev-security-policy@mozilla.org
Hi Amir, Although we are dedicated to complying with the BRs, unfortunately, incidents of BR violations have still occurred. I believe this community understands that incidents can happen with any CA, but what truly matters is the CA's attitude towards addressing the problems and working to res

Re: Approval of Taiwan CA's Root Inclusion Request

2024-06-04 Thread Matt Palmer
On Tue, Jun 04, 2024 at 04:31:15PM -0700, 'Amir Omidi (aaomidi)' via dev-security-policy@mozilla.org wrote: > TWCA has a couple of incidents open for revocation delays. I think until > this CA can show that it can follow its own CP/CPS and BRs, new trust > anchors from that CA should not be accept

Re: Approval of Taiwan CA's Root Inclusion Request

2024-06-04 Thread 'Amir Omidi (aaomidi)' via dev-security-policy@mozilla.org
TWCA has a couple of incidents open for revocation delays. I think until this CA can show that it can follow its own CP/CPS and BRs, new trust anchors from that CA should not be accepted into the Mozilla Trust Store. Beyond that looking at the document linked here: https://www.twca.com.tw/uploa

Approval of Taiwan CA's Root Inclusion Request

2024-06-04 Thread 'Ben Wilson' via dev-security-policy@mozilla.org
Greetings, Public discussion regarding inclusion of the TWCA CYBER Root CA (websites trust bit with EV) and the TWCA Global Root CA G2 (email trust bit) began on the CCADB Public List on April 22, 2024 ( https://groups.google.com/a/ccadb.org/g/public/c/rAsxoNILZ6A/m/vqn7iTHEAwAJ) and concluded rec