On Wed, Apr 4, 2018 at 2:46 PM, Ryan Hurst via dev-security-policy < [email protected]> wrote:
> On Wednesday, April 4, 2018 at 1:58:35 PM UTC-7, Wayne Thayer wrote: > > Mozilla needs to be able to read audit reports in the English language > > without relying on machine translations that may be inaccurate or > > misleading. > > > > I suggest adding the following sentence to the end of policy section > 3.1.4 > > “Public Audit Information”: > > > > An English language version of the publicly-available audit information > > MUST be supplied by the Auditor. > > > > This is: https://github.com/mozilla/pkipolicy/issues/106 > > > > ------- > > > > This is a proposed update to Mozilla's root store policy for version > > 2.6. Please keep discussion in this group rather than on GitHub. Silence > > is consent. > > > > Policy 2.5 (current version): > > https://github.com/mozilla/pkipolicy/blob/2.5/rootstore/policy.md > > Should the text require the English version to be the authoritative > version? > > This makes sense, and is easy to add to the proposed statement: An authoritative English language version of the publicly-available audit information MUST be supplied by the Auditor. it would be helpful for auditors that issue report in languages other than English to confirm that this won't create any issues. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
