Frank Hecker:
I agree with your general point, namely that we should start doing
better tracking of audit dates, particularly for EV audits. However I
don't know at this point what would be appropriate in terms of setting
timeframes for when an audit would be considered to be out of date.
Eddy Nigg (StartCom Ltd.) wrote:
Frank Hecker:
I agree with your general point, namely that we should start doing
better tracking of audit dates, particularly for EV audits. However I
don't know at this point what would be appropriate in terms of setting
timeframes for when an audit would
Frank Hecker:
The problem is that while the EV guidelines contain an explicit
requirement for annual audits, they don't dictate things like the length
of the grace period that browser vendors should give CAs once their
audits expire.
In fact, it's not even clear from the EV guidelines
Nelson B Bolyard:
Those criteria are independent of the browser or application that uses them.
There isn't a Mozilla EV criteria and a separate IE EV criteria and
Opera EV criteria.
Correct, however it's the browsers which must govern the re-auditing.
Actually this is the *ONLY* thing
4 matches
Mail list logo
