Confirmed users, Administrators
5,526
edits
CA/Information Checklist: Difference between revisions
Jump to navigation
Jump to search
Added BR Self Assessment Section
(Removed duplication of links to potentially problematic practices) |
(Added BR Self Assessment Section) |
||
| Line 227: | Line 227: | ||
#** Ensure Intrusion Detection System and other monitoring software is up-to-date. | #** Ensure Intrusion Detection System and other monitoring software is up-to-date. | ||
#** Confirm that you will be able to shut down certificate issuance quickly if you are alerted of intrusion. | #** Confirm that you will be able to shut down certificate issuance quickly if you are alerted of intrusion. | ||
== Baseline Requirements Self Assessement == | |||
If you are requesting the Websites (TLS/SSL) trust bit for your root certificate, then you must perform a [[CA:BRs-Self-Assessment|BR Self Assessment]] to ensure that your CP and CPS documents and your practices comply with the [https://cabforum.org/baseline-requirements-documents/ CA/Browser Forums' Baseline Requirements] (BRs). | |||
* [[CA:BRs-Self-Assessment|BR Self Assessment]] | |||
== Response to Mozilla's CA Recommended Practices == | == Response to Mozilla's CA Recommended Practices == | ||
Review Mozilla's [[CA:Recommended_Practices | CA Recommended Practices.]] If your practices differ from any of these recommended practices, then describe those differences and explain how the concern(s) are addressed. | Review Mozilla's [[CA:Recommended_Practices | CA Recommended Practices.]] If your practices differ from any of these recommended practices, then describe those differences and explain how the concern(s) are addressed. | ||
* [[CA:Recommended_Practices | CA Recommended Practices]] | |||
== Response to Mozilla's list of Potentially Problematic Practices == | == Response to Mozilla's list of Potentially Problematic Practices == | ||
Review Mozilla's list of [[CA:Problematic_Practices | Potentially Problematic Practices.]] For each one, state if it is or is not applicable. For the ones that are applicable, provide URLs and section/page number information pointing directly to the sections of the CP/CPS documents that are relevant, and explain how you address the concern(s). | Review Mozilla's list of [[CA:Problematic_Practices | Potentially Problematic Practices.]] For each one, state if it is or is not applicable. For the ones that are applicable, provide URLs and section/page number information pointing directly to the sections of the CP/CPS documents that are relevant, and explain how you address the concern(s). | ||