Hi Mike, Thanks for your suggestions. The CCADB Public discussion kickoff email already links to the CA’s incident history, but we could improve how we present that information to community reviewers. We’re taking your suggestions under advisement, and I’ll raise them with the root store operators participating in the CCADB public discussions so we can consider how best to incorporate them into the process. Thanks again,
Ben On Fri, Oct 2, 2026 at 4:40 PM Mike Shaver <[email protected]> wrote: > Hi Ben, > > I think it would be helpful if, for (re)inclusion requests, that the > discussion kickoff email contained a list of the relevant CA’s incidents > since the last such request (if any) — especially if there are unresolved > incidents. (unresolved incidents shouldn’t inherently block an inclusion > request, of course, but one assumes a CA to be on their best behaviour when > requesting root inclusion, so their handling of contemporary incidents > could be quite informative.) > > Mike > > On Fri, Oct 2, 2026 at 4:07 PM 'Ben Wilson' via > [email protected] <[email protected]> wrote: > >> All, >> >> Public discussion regarding inclusion of the following GoDaddy root CA >> certificates concluded on the CCADB Public list on September 29, 2026: >> >> · Starfield TLS Root CA - R1 >> <https://crt.sh/?q=97366DA00BAF6730A84D1A8CBA5BAD7961C46BCE707E09241CC9C4C7E3C64F10> >> >> · GoDaddy TLS Root CA - R1 >> <https://crt.sh/?q=25CF3DA8E9B97ADDBF92543C2B82527C8A4E2CFF2062A6483040D4B64ACE719F> >> >> See >> https://groups.google.com/a/ccadb.org/g/public/c/6hPxKjObVlc/m/WNaT8eINGwAJ >> >> Additional details concerning GoDaddy's request may be found in the >> above-referenced discussion, in Bugzilla Case #2035858 >> <https://bugzilla.mozilla.org/show_bug.cgi?id=2035858>, and in CCADB >> Case No. 3059 >> <https://ccadb.my.salesforce-sites.com/ccadb/CasePrintViewAllPublic?recordId=500TO00000jyTWkYAM> >> . >> >> Mozilla's root inclusion process is outlined here: >> >> https://wiki.mozilla.org/CA/Application_Process#Process_Overview >> >> Additional information about application review may be found here: >> >> https://wiki.mozilla.org/CA/Application_Verification >> >> This notice states Mozilla's intent to approve GoDaddy's root inclusion >> request. This begins a 7-day “last call” period ending on October 9, 2026, >> for any final objections. >> >> Thanks, >> >> Ben >> >> -- >> You received this message because you are subscribed to the Google Groups >> "[email protected]" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion visit >> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CA%2B1gtaYgXwP0hSSMXJTnm-81jNHTtLHa5oA4G47WeE3SUW4JQA%40mail.gmail.com >> <https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CA%2B1gtaYgXwP0hSSMXJTnm-81jNHTtLHa5oA4G47WeE3SUW4JQA%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CA%2B1gtaZhVqOOCO%3DCL3CWcSbE1Cs7E7D5KSi7cBpd-_YpaOHQ4w%40mail.gmail.com.
