Re: Timely Updates to CA Incident Bugs

2019-02-19 Thread Wayne Thayer via dev-security-policy
Thank you George, this is indeed interesting. As you and Ryan have noted, there is a lot of human interaction required, but I would like to find ways to better automate some of the work involved in managing incident bugs, especially since there seems to be no end of them in sight. Meanwhile, I hav

Re: Timely Updates to CA Incident Bugs

2019-02-18 Thread Ryan Sleevi via dev-security-policy
On Sat, Feb 16, 2019 at 12:24 PM George Macon via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Prompted by the update to the Incident Response guidance earlier this > week, I wondered how well CAs are doing at giving timely updates on the > CA Incident bugs. > > I put toge

Timely Updates to CA Incident Bugs

2019-02-16 Thread George Macon via dev-security-policy
Prompted by the update to the Incident Response guidance earlier this week, I wondered how well CAs are doing at giving timely updates on the CA Incident bugs. I put together a quick prototype [0] that would examine the bug whiteboards and last-update timestamps and report those where the next upd