Eddy Nigg wrote: > Frank, I'd like to know (again) what our policy is in regards of EV > audit requirements. As I understand from the bug report, Wells Fargo > didn't actually absolved the EV audit, but some EV readiness audit. I > think we are past the time where we'd accept such audits?
A quick answer, I can research more later... We had a discussion about EV audits against the draft EV guidelines, and decided we would stop accepting such audits after a certain date (June 30, 2008?). But I think EV readiness audits are a different issue. IIRC readiness audits are done when a CA has implemented the infrastructure for EV but has not yet accumulated a significant operational history of EV issuance. So any CA that is new to EV will likely do a readiness audit first. IIRC this was true of some other CAs we've dealt with -- they started out with readiness audits, started issuing EV certs, and then by the time we were able to consider their requests in some cases they were still covered by the readiness audit and in other cases had advanced to a regular audit. Frank -- Frank Hecker [EMAIL PROTECTED] _______________________________________________ dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto
