Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update http://ccadb.org/cas/fields#audit-information #6

Closed
WilsonKathleen opened this issue Aug 23, 2017 · 2 comments
Closed

Update http://ccadb.org/cas/fields#audit-information #6

WilsonKathleen opened this issue Aug 23, 2017 · 2 comments

Comments

@WilsonKathleen
Copy link
Contributor

The second row of http://ccadb.org/cas/fields#audit-information needs to be updated. Probably best to change it to:
URL to an auditor's statement that the operation of this certificate has been audited according to Mozilla's Root Store Policy <link: https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy#audit-criteria>.

Also, please add a row for Audit Period, with text:
For each Audit Statement provide the Audit Period Start Date and Audit Period End Date.
In a period‐of‐time audit, the Audit Period is the period between the first day (start) and the last day of operations (end) covered by the auditors in their engagement.
The period during which the CA issues Certificates SHALL be divided into an unbroken sequence of audit periods. An audit period MUST NOT exceed one year in duration.

@gerv
Copy link
Contributor

gerv commented Sep 4, 2017

@WilsonKathleen: using the text you propose would be putting something Mozilla-specific into a generic CCADB document. Is that what you want? Might it not be better just to update the criteria version numbers?

@WilsonKathleen
Copy link
Contributor Author

Oh yes, you are correct, so please add ETSI EN 319 411-1 v1.1.1 and ETSI EN 319 411-2 v2.1.1 to the second row (the 'Standard Audit' row).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants