Re: CA Communication - May 12, 2014

2014-05-14 Thread Brian Smith
On Wed, May 14, 2014 at 10:06 AM, Patrick Kobly wrote: > Perhaps I'm dense and missing something or perhaps this isn't the right > place to be asking. Why would this necessitate bringing the CA online when > responses can be signed by an Authorized Responder (i.e. cert with EKU > id-kp-OCSPSigni

RE: CA Communication - May 12, 2014

2014-05-14 Thread Jeremy Rowley
: mozilla-dev-security-pol...@lists.mozilla.org Subject: Re: CA Communication - May 12, 2014 On Monday, 12 May 2014 13:45:16 UTC-6, Jeremy Rowley wrote: > +1. This is especially true in the federal space where some intermediates > > are stored offline most of the time. Per Section 4.9.7 of

Re: CA Communication - May 12, 2014

2014-05-14 Thread Patrick Kobly
On Monday, 12 May 2014 13:45:16 UTC-6, Jeremy Rowley wrote: > +1. This is especially true in the federal space where some intermediates > > are stored offline most of the time. Per Section 4.9.7 of the FBCA CP, > > these CAs use a 31-day interval for status information. Bringing the CA > >

Re: CA Communication - May 12, 2014

2014-05-12 Thread Kathleen Wilson
https://bugzilla.mozilla.org/show_bug.cgi?id=991815#c24 ...sounded like a reasonable plan to me. Yet AFAICT somewhere between comment 24 and comment 28 you've elected to bypass the CABForum process. The BRs permit OCSP Responses for Intermediate CA Certificates to be valid for <=12 months. Sud

RE: CA Communication - May 12, 2014

2014-05-12 Thread Jeremy Rowley
Communication - May 12, 2014 On 12/05/14 18:40, Kathleen Wilson wrote: > All, > > The final draft of the CA Communication is here: > https://wiki.mozilla.org/CA:Communications#May_12.2C_2014 > > If you have further comments or feedback on this, please send your > input now

Re: CA Communication - May 12, 2014

2014-05-12 Thread Rob Stradling
On 12/05/14 18:40, Kathleen Wilson wrote: All, The final draft of the CA Communication is here: https://wiki.mozilla.org/CA:Communications#May_12.2C_2014 If you have further comments or feedback on this, please send your input now. Otherwise, I will send the communication (via email) this after

Re: CA Communication - May 12, 2014

2014-05-12 Thread Kathleen Wilson
On 5/12/14, 11:07 AM, Kurt Roeckx wrote: On Mon, May 12, 2014 at 10:40:27AM -0700, Kathleen Wilson wrote: All, The final draft of the CA Communication is here: https://wiki.mozilla.org/CA:Communications#May_12.2C_2014 So I've asked about this before but I think you never replied. It doesn't

Re: CA Communication - May 12, 2014

2014-05-12 Thread Kurt Roeckx
On Mon, May 12, 2014 at 10:40:27AM -0700, Kathleen Wilson wrote: > All, > > The final draft of the CA Communication is here: > https://wiki.mozilla.org/CA:Communications#May_12.2C_2014 So I've asked about this before but I think you never replied. It doesn't mention anything about the EV audit.