Re: Auditor letters and incident reports

2019-09-06 Thread Wayne Thayer via dev-security-policy
Thanks for the response Jeff. On Fri, Sep 6, 2019 at 4:17 PM jeffwardpki--- via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On Wednesday, August 21, 2019 at 11:46:37 PM UTC-5, Jeremy Rowley wrote: > > Hey all, > > > > An interesting issue came up recently with audits.

Re: An honest viewpoint: Move Extended Validation Information out of the URL bar

2019-09-06 Thread Oliver via dev-security-policy
On Friday, September 6, 2019 at 11:44:30 AM UTC-7, browser...@gmail.com wrote: > Thanks for the update Jonathan, the article I read didn't mention the funding > source, but the article wasn't the point of my post. > > Bottom line, why strip out of view the only browser mechanism that identifies

Re: Auditor letters and incident reports

2019-09-06 Thread jeffwardpki--- via dev-security-policy
On Wednesday, August 21, 2019 at 11:46:37 PM UTC-5, Jeremy Rowley wrote: > Hey all, > > An interesting issue came up recently with audits. Because the Mozilla policy > includes some requirements that diverge from the BRs, the audit criteria > don't necessarily cover everything Mozilla cares

Re: An honest viewpoint: Move Extended Validation Information out of the URL bar

2019-09-06 Thread browserpadlock--- via dev-security-policy
On Thursday, September 5, 2019 at 12:16:13 PM UTC-4, Jonathan Rudenberg wrote: > On Wed, Sep 4, 2019, at 14:53, browserpadlock--- via dev-security-policy > wrote: > > It seems that the Certificate Authorities are doing their jobs quite > > well in regards to EV certs and making sure that it is

GlobalSign: OCSP Responder Returns invalid values for some Precertificates

2019-09-06 Thread Doug Beattie via dev-security-policy
Based on announcements by DigiCert and Let's Encrypt, GlobalSign has found that our Precertificates without corresponding certificates also return Unauthorized or Unknown. We're working with PrimeKey on a patch and are also updating our own OCSP services to return the proper values. Here are 2