CA/Root Inclusion Considerations: Difference between revisions

Jump to navigation Jump to search
Updated links regarding Salesforce requirements.
m (removed {{draft}})
(Updated links regarding Salesforce requirements.)
 
Line 16: Line 16:
** [https://en.wikipedia.org/wiki/Computer_and_network_surveillance#Network_surveillance network surveillance] that intercepts/manipulates traffic or collects private information about a person or organization and sends it to another entity without the permission of the person or organization, or in a way that endangers the privacy or device security of the person or organization; or
** [https://en.wikipedia.org/wiki/Computer_and_network_surveillance#Network_surveillance network surveillance] that intercepts/manipulates traffic or collects private information about a person or organization and sends it to another entity without the permission of the person or organization, or in a way that endangers the privacy or device security of the person or organization; or
** [https://en.wikipedia.org/wiki/Cyber_spying cyber espionage] that aims to obtain private information from a person or organization without the knowledge or permission of the person or organization for personal, economic, political or military advantage.
** [https://en.wikipedia.org/wiki/Cyber_spying cyber espionage] that aims to obtain private information from a person or organization without the knowledge or permission of the person or organization for personal, economic, political or military advantage.
* The CA operator is in [https://trust.salesforce.com/blocked a global region that cannot use the CCADB], or is not capable of entering into a contractual agreement with a [https://www.treasury.gov/resource-center/sanctions/Programs/Pages/Programs.aspx US-based] company.
* The CA operator is in a global region that cannot use the CCADB (per the "Export Compliance" section of the [https://a.sfdcstatic.com/content/dam/www/ocms-backup/assets/pdf/misc/salesforce_MSA.pdf Salesforce Master Subscription Agreement]), or is not capable of entering into a contractual agreement with a [https://www.treasury.gov/resource-center/sanctions/Programs/Pages/Programs.aspx US-based] company.
* The CA operator appears to have:
* The CA operator appears to have:
** Deliberately violated the version of [https://www.mozilla.org/projects/security/certs/policy/ Mozilla's Root Store Policy] or other applicable policy that was in effect at the time that the violation occurred; or
** Deliberately violated the version of [https://www.mozilla.org/projects/security/certs/policy/ Mozilla's Root Store Policy] or other applicable policy that was in effect at the time that the violation occurred; or
Confirmed users, Administrators
5,526

edits

Navigation menu