Confirm, administrator
5,526
edits
Changes
Drafting initial text
* Concerns about certificates CAs have issued
** [ca-concern] -- concern has been raised about certificates that a CA has issued
*** Current query: Whiteboard contains [https://bugzilla.mozilla.org/buglist.cgi?resolution=---&query_format=advanced&component=CA%20Certificates&product=mozilla.org&query_based_on=Active-CA-List&status_whiteboard_type=allwordssubstr&query_format=advanced&status_whiteboard=Incident%20Reported Incident Reported]
** [ca-incident] -- the concern about a CA's certificates has been confirmed, and further investigation and action required to understand and contain the incident.
** [ca-incident-response] -- the incident has been contained, and the CA has follow-up action items
*** Current query: Whiteboard contains [https://bugzilla.mozilla.org/buglist.cgi?resolution=---&query_format=advanced&component=CA%20Certificates&product=mozilla.org&query_based_on=Active-CA-List&status_whiteboard_type=allwordssubstr&query_format=advanced&status_whiteboard=Incident%20Action%20Items Incident Action Items]
*** Whiteboard hasn't yet been updated for all of these types of bugs.
** [ca-compliance] -- the concern about a CA's certificates is in regards to failure to comply with Mozilla policy and/or the CA/Browser Forum's Baseline Requirements, and is determined to not be an imminent security concern.
*** Current query: Whiteboard contains [https://bugzilla.mozilla.org/buglist.cgi?resolution=---&query_format=advanced&component=CA%20Certificates&product=mozilla.org&query_based_on=Active-CA-List&status_whiteboard_type=allwordssubstr&query_format=advanced&status_whiteboard=BR%20Compliance BR Compliance]
* CA Audit Statements
** [ca-audits] -- One bug may be created per CA to store audit statements that are not published on [http://www.webtrust.org/ webtrust.org], the auditor's website, or the CA's website. The bug will be closed as WONTFIX, but the CA may continue to add documents to the bug each year.
