Hi Kathleen, I was looking over the spreadsheet and noticed that some CA's who are transitioning to a new chain are actually reporting the expiry and last dates of issuance. I'm glad to see that and now have 2 questions.
1. When CA's report a transition from one root or chain to another, do you ask for and/or do they provide a time frame and date certain for the transition to complete? 2. Is there a time frame or policy for when a root will be actually removed from the trust store following the last date of issuance, or for that matter the expiration of the root itself? I gave a quick glance at the inclusion policy but may have missed it. Thanks. Original Message From: Kathleen Wilson Sent: Monday, June 16, 2014 7:09 PM I have tabulated all of the responses that I have received. https://wiki.mozilla.org/CA:Communications#May_2014_Responses Click on: "Spreadsheet of CA Responses to May 2014 Communication" (This links to a Google spreadsheet.) Many CAs have more work to do on this, so I will continue to update the spreadsheet as CAs send me information. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

