CA Community in Salesforce

[Kathleen Wilson]

All,

As many of you know, we've been working to customize Salesforce to
create a CA Community that enables CAs to directly provide the data for
all of the publicly disclosed and audited subordinate CAs chaining up to
root certificates in Mozilla's program, and to also directly provide
data about their revoked intermediate certificates.

This project is still in the early-adopter phase. Eventually, a Primary
Point of Contact for each included CA will be given a Salesforce CA
Community license, so that each of the CAs in Mozilla's program can
input, access, and update their intermediate certificate data directly
in SalesForce.

Instructions for the CA Community in Salesforce are here:
https://wiki.mozilla.org/CA:SalesforceCommunity

I would greatly appreciate it if one or two more included CAs will
volunteer to be early adopters of the CA Community in Salesforce. The
customizations resulting from the first early adopters were sufficient
enough to warrant another CA or two trying it out before I open it up to
all included CAs. Please send me email if you are willing/able to try
entering some intermediate certificates into Salesforce and provide
feedback to me in November.

Thanks,
Kathleen

[Rob Stradling]

Ditto for Comodo.

On 09/11/15 11:01, Steve Roylance wrote:
> Hi Kathleen,
>
> GlobalSign would be happy to step forward as an early adopter.
>
> Steve

>> _______________________________________________
>> dev-security-policy mailing list
>> dev-secur...@lists.mozilla.org
>> https://lists.mozilla.org/listinfo/dev-security-policy
>>
>>
>> _______________________________________________
>> dev-security-policy mailing list
>> dev-secur...@lists.mozilla.org
>> https://lists.mozilla.org/listinfo/dev-security-policy

--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online
Office Tel: +44.(0)1274.730505
Office Fax: +44.(0)1274.730909
www.comodo.com

COMODO CA Limited, Registered in England No. 04058690
Registered Office:
3rd Floor, 26 Office Village, Exchange Quay,
Trafford Road, Salford, Manchester M5 3EQ

This e-mail and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
sender by replying to the e-mail containing this attachment. Replies to
this email may be monitored by COMODO for operational or business
reasons. Whilst every endeavour is taken to ensure that e-mails are free
from viruses, no liability can be accepted and the recipient is
requested to use their own virus checking software.

[Varga Viktor]

Hi Kathleen,

I think Netlock will also try it.

sy. Viktor

[Kathleen Wilson]

On 11/5/15 3:00 PM, Kathleen Wilson wrote:
> All,
>
> As many of you know, we've been working to customize Salesforce to
> create a CA Community that enables CAs to directly provide the data for
> all of the publicly disclosed and audited subordinate CAs chaining up to
> root certificates in Mozilla's program, and to also directly provide
> data about their revoked intermediate certificates.
>

><snip>

>
> Instructions for the CA Community in Salesforce are here:
> https://wiki.mozilla.org/CA:SalesforceCommunity
>

Thanks to the early-adopters of the CA Community in Salesforce for their
valuable feedback, which has been incorporated.

I will begin issuing CA Community Salesforce licenses to the rest of the
included CAs, and will probably issue about 5 licenses per week to begin
with.

Please send me email if you would like to get your CA Community
Salesforce license before the holidays (I plan to be offline most of the
last 2 weeks of December).

Kathleen

[Kathleen Wilson]

On 11/30/15 2:54 PM, Kathleen Wilson wrote:
> On 11/5/15 3:00 PM, Kathleen Wilson wrote:
>> All,
>>
>> As many of you know, we've been working to customize Salesforce to
>> create a CA Community that enables CAs to directly provide the data for
>> all of the publicly disclosed and audited subordinate CAs chaining up to
>> root certificates in Mozilla's program, and to also directly provide
>> data about their revoked intermediate certificates.
>>
>> <snip>
>>
>> Instructions for the CA Community in Salesforce are here:
>> https://wiki.mozilla.org/CA:SalesforceCommunity
>>
>

I have added the following two wiki pages. Please note the important
caveat in each:

Important Caveat: We know that the data is incomplete! We are still in
the process of issuing CA Community Salesforce licenses to the CAs, so
not all CAs have received their licenses yet. Additionally, CAs will
need time to enter all of their data.

1) https://wiki.mozilla.org/CA:SubordinateCAcerts
The following spreadsheet lists the Public Intermediate (Subordinate) CA
Certificates that have been entered into the CA Community in Salesforce,
which means that they must have public-facing documentation and audit
statements that meet Mozilla's CA Certificate Policy and the CA/Browser
Forum's Baseline Requirements.

2) https://wiki.mozilla.org/CA:RevokedSubCAcerts
The following spreadsheet lists the Revoked Intermediate (Subordinate)
CA Certificates that have been entered into the CA Community in Salesforce.

Thanks to all of you CAs who have already been entering data into the CA
Community in Salesforce! Based on your feedback, we have updated the
user interface with more instructions and help text. Please continue to
send me your feedback.

Thanks,
Kathleen

[Kathleen Wilson]

I believe I have issued a CA Community Salesforce license to the Primary
Point of Contact (POC) of each currently-included CA.

https://wiki.mozilla.org/CA:SalesforceCommunity

Please send me email if any of you are a Primary POC for a
currently-included CA, and you have not received your CA Community
Salesforce license. Also, please be sure to login to the CA Community in
Salesforce and let me know if you have an problems or questions about it.

Thanks,
Kathleen

[Kathleen Wilson]

I have updated a couple wiki pages in regards to the CA Community in
Salesforce...

+ Added an 'After Inclusion' section to the page about how to apply for
inclusion:
https://wiki.mozilla.org/CA:How_to_apply#After_Inclusion

+ Added steps 15 and 16 to the Process Overview:
https://wiki.mozilla.org/CA#Process_Overview

I will appreciate thoughtful and constructive feedback on these changes.

Thanks,
Kathleen

[Kathleen Wilson]

I also added this to our list of things to discuss for version 2.3 of
Mozilla's CA Certificate Policy.

https://wiki.mozilla.org/CA:CertificatePolicyV2.3#Transparency