On Fri, Mar 15, 2019 at 12:36 AM Jaime Hablutzel via dev-security-policy <
[email protected]> wrote:

> Could you please provide me a link to a previous discussion where the
> negative was stated, maybe by the module owner?. But note that I'm not
> asking for a bespoke or improvised exception for the current issue but for
> the possibility to introduce a procedure to handle any type of low
> breach/high disruption violations now and in the future?.
>

"However, Mozilla does not grant exceptions to the BR revocation
requirements." [1]
"In my opinion, Mozilla should not get in to the business of granting
one-off exceptions ..." [2]

[1] https://wiki.mozilla.org/CA/Responding_To_An_Incident
[2]
https://groups.google.com/d/msg/mozilla.dev.security.policy/S2KNbJSJ-hs/HNDX5LaZCAAJ
(That's this thread, one week ago)
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to