Re: AC Camerfirma's CP & CPS disclosure

2018-09-04 Thread Wayne Thayer via dev-security-policy
Thank you for this response Ramiro. I have copied this to the bug [1] and have described Mozilla's expectations for point-in-time audits that confirm that these issues have been resolved. [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1478933 On Tue, Sep 4, 2018 at 5:47 AM ramirommunoz--- via

Re: Audit Reminder Email Summary

2018-09-04 Thread Ryan Sleevi via dev-security-policy
On Mon, Sep 3, 2018 at 8:54 AM reinhard.dietrich--- via dev-security-policy wrote: > Dear all, > as already mentioned above, qualified auditors (nat person/organization) > have been selected which fulfil the points as listed in our previous > response. The auditors fulfilled these relevant

What is the date for termination? FW: CT Log deprecation

2018-09-04 Thread ?? ? via dev-security-policy
Hello Jeremy-san, Would you tell us what is the specific date we cannot use the legacy Symantec CT log servers? Is the date of September 28 all right to use the legacy Symantec log servers? Thank you for your consideration. Best regards, Hisashi Kamo > -Original Message- > From: ?? ?

What is the date for termination? FW: CT Log deprecation

2018-09-04 Thread 加毛 寿 via dev-security-policy
※個人情報保護のため、宛先を非表示(BCC)にて送信しています。 - Hello Jeremy-san, Would you tell us what is the specific date we cannot use the legacy Symantec CT log servers? Is the date of September 28 all right to use the legacy Symantec log servers? Thank you for

Re: AC Camerfirma's CP & CPS disclosure

2018-09-04 Thread ramirommunoz--- via dev-security-policy
Hi Wayne here you are a response to the qualified audits. As you remarks we have include links to the previously reported bugs. We will keep you informed about the remediation process plan. Sorry for the delay as you know Juan Angel is the person in charge of this Work and is on vacation for