Matt,

I'm not sure an incident report is necessary. The CCADB policy allows both
to be provided, and the mechanisms that CCADB uses (both for CAs and for
Root Stores) permit a host of expressiveness (and further changes are being
made).

While there is certainly benefit in highlighting the English language
versions, the CCADB policy does not preclude other languages.

This is something that the proposed Browser Alignment ballots in the CA/B
Forum,
https://github.com/cabforum/documents/compare/master...sleevi:2019-10-Browser_Alignment
,
would address. It incorporates the Mozilla Policy, Microsoft Policy, and
CCADB policy within the BRs itself.

In that branch, see the revised Section 8.6

On Thu, Mar 19, 2020 at 7:58 AM Matt Palmer via dev-security-policy <
dev-security-policy@lists.mozilla.org> wrote:

> On Thu, Mar 19, 2020 at 11:10:05AM +0000, arnold.ess...@t-systems.com
> wrote:
> > Thanks for pointing it out.  We changed the links so that they now refer
> > to the English version of the CP and CPS.
>
> Thanks for the quick update.  Do you have an ETA for the preliminary
> incident report?
>
> - Matt
>
> _______________________________________________
> dev-security-policy mailing list
> dev-security-policy@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-security-policy
>
_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to