Groups
Groups
Sign in
Groups
Groups
dev-security-policy@mozilla.org
Conversations
About
Send feedback
Help
Sort By Relevance
Sort By Date
1–9 of 9
Ben Wilson
,
Kurt Seifried
5
2/6/23
CA Communication re: Mozilla Root Store Policy (MRSP) Version 2.8.1
2023 at
1
:06 PM Kurt Seifried wrote: > Is there a dashboard with a summary of where they are in the > process/expected timelines (eg weeks/months/years?) so we know which to >
unread,
CA Communication re: Mozilla Root Store Policy (MRSP) Version 2.8.1
2023 at
1
:06 PM Kurt Seifried wrote: > Is there a dashboard with a summary of where they are in the > process/expected timelines (eg weeks/months/years?) so we know which to >
2/6/23
Ben Wilson
, …
Aaron Gable
5
1/30/23
MRSP Policy v. 2.8.1 Finalization
version >
2.8
.
1
. I don't see any new requirements that would require lead time for > CAs to implement. I should be ready to post this final version within the > next two weeks
unread,
MRSP Policy v. 2.8.1 Finalization
version >
2.8
.
1
. I don't see any new requirements that would require lead time for > CAs to implement. I should be ready to post this final version within the > next two weeks
1/30/23
Ben Wilson
, …
Clint Wilson
14
1/23/23
Policy 2.8.1: MRSP Issue #256: Requirement that Partitioned CRLs include an Issuing Distribution Point extension
Effective October
1
, 2022, CA providers must populate the CCADB fields under "Pertaining to Certificates Issued by This CA" with either the CRL Distribution Point for
unread,
Policy 2.8.1: MRSP Issue #256: Requirement that Partitioned CRLs include an Issuing Distribution Point extension
Effective October
1
, 2022, CA providers must populate the CCADB fields under "Pertaining to Certificates Issued by This CA" with either the CRL Distribution Point for
1/23/23
Ben Wilson
,
Corey Bonnell
2
12/8/22
Policy 2.8.1: MRSP Issue #251: Full CRL Publication Requirements
shard [
1
]. To mitigate against any risk caused by CCADB information lagging the actual state of CA revocation information, policy should be amended such that:
1
. The location(s) of
unread,
Policy 2.8.1: MRSP Issue #251: Full CRL Publication Requirements
shard [
1
]. To mitigate against any risk caused by CCADB information lagging the actual state of CA revocation information, policy should be amended such that:
1
. The location(s) of
12/8/22
Ben Wilson
,
Corey Bonnell
2
12/7/22
Policy 2.8.1: MRSP Issue #253: CAs MUST specify BR 3.2.2.4 Methods
Practices [
1
]. This change will align the two documents. Thanks, Corey [
1
] https://wiki.mozilla.org/CA/Required_or_Recommended_Practices#Verifying_Domain_Name_Ownership
unread,
Policy 2.8.1: MRSP Issue #253: CAs MUST specify BR 3.2.2.4 Methods
Practices [
1
]. This change will align the two documents. Thanks, Corey [
1
] https://wiki.mozilla.org/CA/Required_or_Recommended_Practices#Verifying_Domain_Name_Ownership
12/7/22
Ben Wilson
,
Aaron Poulsen
5
11/22/22
Policy 2.8.1: Candidate Issues to Address in MRSP v. 2.8.1
> version
2.8
.
1
candidates. Related to the "annual update" of a CA's CP/CPS, >>> the change would replace "at least once every year" in item
unread,
Policy 2.8.1: Candidate Issues to Address in MRSP v. 2.8.1
> version
2.8
.
1
candidates. Related to the "annual update" of a CA's CP/CPS, >>> the change would replace "at least once every year" in item
11/22/22
Ben Wilson
, …
Matthias van de Meent
7
11/18/22
Policy 2.8.1: MRSP Issue #249: Clarification re: all CPs and CPSes
(version
1
... n) over the lifetimes of multiple roots. It may be that they want to keep v.
1
from 1995 still accessible after 2020, but under the given scenario, it would not be required
unread,
Policy 2.8.1: MRSP Issue #249: Clarification re: all CPs and CPSes
(version
1
... n) over the lifetimes of multiple roots. It may be that they want to keep v.
1
from 1995 still accessible after 2020, but under the given scenario, it would not be required
11/18/22
Ben Wilson
, …
Ryan Dickson
10
11/17/22
Policy 2.8.1: MRSP Issue #243: Update periods for CPs and CPSes
UTC+
1
: > >> Hi all, >> >> I commented on the GitHub issue >> , >> but if we're looking at changing this requirement, I think we should do so >
unread,
Policy 2.8.1: MRSP Issue #243: Update periods for CPs and CPSes
UTC+
1
: > >> Hi all, >> >> I commented on the GitHub issue >> , >> but if we're looking at changing this requirement, I think we should do so >
11/17/22
Ben Wilson
11/15/22
Policy 2.8.1: MRSP Issue #257: Requiring CAs to follow Discussions on the CCADB Public List
All, This discussion thread relates to Issue #257 in the Mozilla PKI Policy repository on GitHub. The proposed language for the last paragraph of
unread,
Policy 2.8.1: MRSP Issue #257: Requiring CAs to follow Discussions on the CCADB Public List
All, This discussion thread relates to Issue #257 in the Mozilla PKI Policy repository on GitHub. The proposed language for the last paragraph of
11/15/22