Re: Jurisdiction of incorporation validation issue

2019-08-23 Thread Jakob Bohm via dev-security-policy
[Please note that the way MS Outlook marks quoted text doesn't work well with Mozilla mail programs]. On 23/08/2019 22:37, Jeremy Rowley wrote: >> 1. I believe the BRs and/or underlying technical standards are very >> clear if the ST field should be a full name ("California") or an >>

Re: Jurisdiction of incorporation validation issue

2019-08-23 Thread Ryan Sleevi via dev-security-policy
On Fri, Aug 23, 2019 at 4:37 PM Jeremy Rowley via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > >> 1. I believe the BRs and/or underlying technical standards are very >clear if the ST field should be a full name ("California") or an >abbreviation ("CA"). > > This

Re: Jurisdiction of incorporation validation issue

2019-08-23 Thread Ryan Sleevi via dev-security-policy
On Fri, Aug 23, 2019 at 4:18 PM Jeremy Rowley wrote: > > I can think of some incremental steps here: > > > - Disclosing exact detailed procedures via CP/CPS > > > > Maybe an addendum to the CPS. Or RPS. I’ll experiment and post something > to see what the community thinks. > Yup. I've seen

RE: Jurisdiction of incorporation validation issue

2019-08-23 Thread Jeremy Rowley via dev-security-policy
>> 1. I believe the BRs and/or underlying technical standards are very clear if the ST field should be a full name ("California") or an abbreviation ("CA"). This is only true of the EV guidelines and only for Jurisdiction of Incorporation. There is no formatting requirement for place of

RE: Jurisdiction of incorporation validation issue

2019-08-23 Thread Jeremy Rowley via dev-security-policy
>> I'm a little nervous about encouraging wide use of OCR. You may recall at >> least one CA was bit by an issue in which their OCR system misidentified >> letters - https://bugzilla.mozilla.org/show_bug.cgi?id=1311713 >> That's why I was keen to suggest technical solutions which would verify

Re: Jurisdiction of incorporation validation issue

2019-08-23 Thread Ryan Sleevi via dev-security-policy
On Fri, Aug 23, 2019 at 2:00 PM Jeremy Rowley wrote: > > >- Could you highlight a bit more your proposal here? My understanding >is that, despite the Handelsregister ("Commercial Register") being >available at a country level, it's further subdivided into a list of >couunty or

RE: Jurisdiction of incorporation validation issue

2019-08-23 Thread Jeremy Rowley via dev-security-policy
* Could you highlight a bit more your proposal here? My understanding is that, despite the Handelsregister ("Commercial Register") being available at a country level, it's further subdivided into a list of couunty or region - e.g. the Amtsgericht Herne ("Local Court Herne"). * It

Re: Jurisdiction of incorporation validation issue

2019-08-23 Thread Jakob Bohm via dev-security-policy
On 23/08/2019 04:29, Jeremy Rowley wrote: I posted this tonight: https://bugzilla.mozilla.org/show_bug.cgi?id=1576013. It's sort of an extension of the "some-state" issue, but with the incorporation information of an EV cert. The tl;dr of the bug is that sometimes the information isn't

Re: Jurisdiction of incorporation validation issue

2019-08-23 Thread Ryan Sleevi via dev-security-policy
On Thu, Aug 22, 2019 at 10:29 PM Jeremy Rowley via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > I posted this tonight: > https://bugzilla.mozilla.org/show_bug.cgi?id=1576013. It's sort of an > extension of the "some-state" issue, but with the incorporation information >

Jurisdiction of incorporation validation issue

2019-08-22 Thread Jeremy Rowley via dev-security-policy
I posted this tonight: https://bugzilla.mozilla.org/show_bug.cgi?id=1576013. It's sort of an extension of the "some-state" issue, but with the incorporation information of an EV cert. The tl;dr of the bug is that sometimes the information isn't perfect because of user entry issues. What I was