Confirm
384
edits
Changes
→Compliance Problems and Incidents: Edits to conform to new whiteboard tags
To report a concern about certificates being issued by a CA in Mozilla's Program, or their audit statements:
* https://bugzilla.mozilla.org/enter_bug.cgi?product=CA%20Program&component=CA%20Certificate%20Compliance
If the bug is in regards to concerns CA certificate issuance, then the bug summary should begin with the CA name(followed by a colon and then a space), so that sorting the bugs by Summary will sort the bugs by CA.
<br /><br />
Open CA Compliance bugs: https://wiki.mozilla.org/CA/Incident_Dashboard
<br /><br />
If the concern is in regards to bug concerns audit statements not containing expected information, then the bug summary should begin with auditor's name, so that sorting the bugs by Summary will sort the bugs by auditor name.
<br /><br />
Open Auditor Compliance bugs: https://wiki.mozilla.org/CA/Auditor_Compliance
* [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&query_format=advanced&component=CA%20Certificate%20Compliance&status_whiteboard_type=allwordssubstr&status_whiteboard=ca-compliance [ca-compliance]] -- For concerns about a CA's certificates failing to comply with [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ Mozilla's CA Certificate Policy] and/or the [https://cabforum.org/baseline-requirements-documents/ CA/Browser Forum's Baseline Requirements], and it is not considered to be an [https://www.mozilla.org/en-US/security/#For_Developers imminent security concern].
* [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&query_format=advanced&component=CA%20Certificate%20Compliance&status_whiteboard_type=allwordssubstr&status_whiteboard=auditor-compliance [auditor-compliance]] -- For concerns about an auditor failing to properly detect and report on CA compliance issues that occurred during one or more periods when the CA was audited.
* [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&query_format=advanced&component=CA%20Certificate%20Compliance&status_whiteboard_type=allwordssubstr&status_whiteboard=delayedca-revocation-ca delay [delayedca-revocation-cadelay]] or [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&query_format=advanced&component=CA%20Certificate%20Compliance&status_whiteboard_type=allwordssubstr&status_whiteboard=delayedleaf-revocation-leaf delay [delayedleaf-revocation-leafdelay]] -- appended after [ca-compliance] whenever a CA fails to abide by the Baseline Requirements' requirement to revoke certificates in a timely fashion.
* [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&query_format=advanced&component=CA%20Certificate%20Compliance&status_whiteboard_type=allwordssubstr&status_whiteboard=audit-delay [audit-delay]] -- appended after [ca-compliance] when a CA is unable to provide audit statements within one year and 3 months of the previous audit period end date.
* [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&query_format=advanced&component=CA%20Certificate%20Compliance&status_whiteboard_type=allwordssubstr&status_whiteboard=covid-19 [covid-19]] -- appended after [ca-compliance], [audit-delay], or [delayedca-revocation-cadelay] when delays are due to mandated restrictions regarding COVID-19.
= Root Inclusion/Change requests and EV Treatment Enablement Requests=
