Hi everyone, We've now worked our way through all 21 issues which were scheduled for Mozilla CA Policy 2.4. You can see the current text here:
https://github.com/mozilla/pkipolicy/blob/master/rootstore/policy.md https://github.com/mozilla/pkipolicy/blob/master/ccadb/policy.md https://github.com/mozilla/pkipolicy/blob/master/ccadb/mozilla.md This message is: 1. A last call for suggested updates which fit the original 2.4 criteria of "either urgent, or relatively uncontroversial and self-contained". 2. A request that people review the document to make sure nothing untoward has crept in. You can see a diff from 2.3 and a list of commits here: https://github.com/mozilla/pkipolicy/compare/2.3...master The CCADB policies are new in 2.4 and so there is no diff. 3. The start of a discussion on implementation timings. I would like most of the changes to apply immediately, but I would like CAs to suggest which changes (and why) might need a phase-in period. Changes which I have identified that might be in this category are: * Require full CP/CPS in English (proposal: 3 months) I hope to finalise policy 2.4 by the end of the month. Gerv _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
