Hi Steve,

Quick questions:

1) What steps, specifically, has Symantec taken to ensure such clarity is
provided in the future?
2) What steps, specifically, has Symantec taken to ensure appropriate
review prior to the execution of such processes?

These questions apply to any process involving CA key material, including,
but not limited to, certificate signing ceremonies or the bringing online
of an offline root.
_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy
  • Symantec Response N Steve Medin via dev-security-policy
    • Re: Symantec Response N Ryan Sleevi via dev-security-policy

Reply via email to