Weekly github digest (Network Security Working Group)

[Infrastructure Bot]

Sunday May 25, 2025

Issues

cabforum/netsec (+0/-9/💬10)

10 issues received 10 new comments:

• #48 Typo: Infrastucture (1 by BenWilson-Mozilla)
• #37 Update Section 4.5 to cover identification of vulnerabilities (1 by BenWilson-Mozilla)
• #28 NCSSRs: Offline CAs should have different requirements (1 by BenWilson-Mozilla) enhancement
• #22 Keys used to sign OCSP responses must be protected in HSMs (1 by BenWilson-Mozilla) Key Protection
• #19 Add requirement that private keys corresponding to publicly trusted CAs shall be physically secured (1 by BenWilson-Mozilla) Key Protection
• #18 Add requirement that CAs implement and maintain a Security Program (1 by BenWilson-Mozilla) New Topic
• #13 NCSSRs should address wireless security vulnerabilities (1 by BenWilson-Mozilla) New Topic
• #9 Provide guidance on penetration tests and vulnerability scans (1 by BenWilson-Mozilla) Vulnerabilities
• #8 Clarify the 96-hour vulnerability remediation process (1 by BenWilson-Mozilla) Vulnerabilities
• #4 Define "air-gapped" and "offline" (1 by BenWilson-Mozilla) Definitions

9 issues closed:

• #13 NCSSRs should address wireless security vulnerabilities New Topic
• #28 NCSSRs: Offline CAs should have different requirements enhancement
• #4 Define "air-gapped" and "offline" Definitions
• #19 Add requirement that private keys corresponding to publicly trusted CAs shall be physically secured Key Protection
• #48 Typo: Infrastucture
• #22 Keys used to sign OCSP responses must be protected in HSMs Key Protection
• #37 Update Section 4.5 to cover identification of vulnerabilities
• #9 Provide guidance on penetration tests and vulnerability scans Vulnerabilities
• #8 Clarify the 96-hour vulnerability remediation process Vulnerabilities

Repositories tracked by this digest:

• https://github.com/cabforum/netsec