Re: What does "No Stipulation" mean, and when is it OK to use it in CP/CPS?

2018-10-18 Thread Jakob Bohm via dev-security-policy
On 15/10/2018 20:01, Kathleen Wilson wrote: I have added the following section to the Required Practices wiki page: https://wiki.mozilla.org/CA/Required_or_Recommended_Practices#BR_Commitment_to_Comply_statement_in_CP.2FCPS I will continue to appreciate feedback on this update. Thanks,

Re: What does "No Stipulation" mean, and when is it OK to use it in CP/CPS?

2018-10-18 Thread Matt Palmer via dev-security-policy
On Thu, Oct 18, 2018 at 03:44:44PM -0700, Kathleen Wilson via dev-security-policy wrote: > I think that a blank section means the same thing as "No stipulation". > Should we require that sections not be left blank? I think that for the avoidance of any sort of doubt or confusion, it would be

Re: What does "No Stipulation" mean, and when is it OK to use it in CP/CPS?

2018-10-18 Thread Kathleen Wilson via dev-security-policy
On 10/18/18 2:03 PM, Joanna Fox wrote: https://wiki.mozilla.org/CA/Required_or_Recommended_Practices#CP.2FCPS_Structured_According_to_RFC_3647 For clarification on this statement, "Any CPS that falls within the scope of Mozilla’s program must not use the words “No stipulation” unless the

Re: Identrust Commercial Root CA 1 EV Request

2018-10-18 Thread identrust--- via dev-security-policy
On Wednesday, October 17, 2018 at 9:08:41 PM UTC-4, Matt Palmer wrote: > On Wed, Oct 17, 2018 at 03:09:52PM -0700, identrust--- via > dev-security-policy wrote: > > On Tuesday, October 16, 2018 at 7:19:07 PM UTC-4, Matt Palmer wrote: > > > On Tue, Oct 16, 2018 at 02:18:39PM -0700, identrust---

Re: Violation report - Comodo CA certificates revocation delays

2018-10-18 Thread Ben Laurie via dev-security-policy
On Fri, 12 Oct 2018 at 19:01, Rob Stradling wrote: > On 12/10/18 16:40, Ryan Sleevi via dev-security-policy wrote: > > On Fri, Oct 12, 2018 at 8:33 AM Ben Laurie wrote: > > >> This is one of the reasons we also need revocation transparency. > > > > As tempting as the buzzword is, and as much

Re: What does "No Stipulation" mean, and when is it OK to use it in CP/CPS?

2018-10-18 Thread Joanna Fox via dev-security-policy
On Monday, October 15, 2018 at 11:23:05 AM UTC-7, Kathleen Wilson wrote: > On 10/15/18 11:01 AM, Kathleen Wilson wrote: > > I have added the following section to the Required Practices wiki page: > > > >