Changes

Jump to: navigation, search

CA/Application Process

78 bytes added, 21:20, 7 November 2022
m
Process Overview: Replaced CCADB with "another Root Store Member of the CCADB"
#* All information provided by the CA MUST be publicly available.
#* If the CA contracts to another organization to help with the root inclusion request, the representative of the CA must clarify that relationship in their request, and must provide clear information about who the ongoing [[CA/Information_Checklist#CA_Primary_Point_of_Contact_.28POC.29|points-of-contact]] will be for the CA.
# A representative of Mozilla or another Root Store Member of the CCADB [[CA/Application_Verification#Information_Verification|verifies the information provided by the CA]]. '''NEW:''' See [https://www.ccadb.org/cas/public-group#root-inclusion-public-discussion "Prerequisites" to public discussion] that is conducted on the [https://groups.google.com/a/mozilla.org/g/dev-security-policy CCADB discussion list!]!# [[CA/Application_Verification#Public_discussion|Public discussion]] for a six-week period begins in on the [https://groups.google.com/a/mozilla.org/g/dev-security-policy CCADB discussion list]. If no concerns are raised during that time period, then the discussion may close and the request may proceed to the approval phase.# During the public-discussion phase, a representative of Mozilla, another root storeRoot Store Member of the CCADB, or the Community (as agreed by a Mozilla representative) performs a [[CA/Application_Verification#Detailed_Review|detailed review of the CA’s CP/CPS and audit documents]]. During this phase, the CA may be required to update their CP/CPS and audit documents to become fully aligned with [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ Mozilla's Root Store Policy].
#* [[CA/CPS_Review|Previous detailed reviews of CA CP/CPS and audit documents]]
# A representative of the CA responds to questions and concerns posted during the public discussion of the CA's request.
# A representative of Mozilla or another Root Store Member of the CCADB summarizes the discussion and resulting decisions or action items.
#* A discussion may be extended beyond the initial comment period if concerns or questions are raised that require further attention.
#* A discussion may be put on hold, pending a CA action item, such that the discussion may continue as soon as the CA has provided the requested information.
Confirm
341
edits

Navigation menu