Mozilla Policy Review: Version 2.6.1 and comments

[lachellel]

Reviews against the trust store / root store program policies were completed during development. One additional review prior to final draft 1.0 to identify any changes for policy and practices.

Final draft 1.0 review against each section of the Mozilla Root Store Policy (v2.6.1 and draft 2.7).

• https://github.com/mozilla/pkipolicy/blob/2.6/rootstore/policy.md

• https://wiki.mozilla.org/CA/Root_Store_Policy_Archive

• 2.1 CA Operations

• 2.2 Validation Procedures

• 2.3. Baseline Requirements

• 3.1 Audits

• 3.1.3 Audit Parameters

• 3.1.4 Public Audit Information

• 3.2 Auditors

• 4.0 CCADB

• 4.1 Additional Requirements

• 4.2 Surveys

• 5.1 Algorithms

• 5.2 Forbidden and Required Practices

• 5.3 Intermediate Certificates

• 5.3.1 Technically Constrained

• 5.3.2 Publicly Disclosed and Audited

• 6 Revocation

• 7 Root Store changes

• 7.1 Inclusions

• 7.2 Updates

• 7.3 Removals

• 8 CA Operational Changes

• 8.1 Change in Legal Ownership CA Operational Changes

• 8.2 Change in Operational Personnel

• 8.3 Change in Secure Location

[lachellel]

• 3.3 CP and CPSes
  • for licenses: the CP asserts public domain dedication
  • verify (again) the CPS(s)