CA/Vulnerability Disclosure: Difference between revisions

Jump to navigation Jump to search
m
→‎Purpose: Minor edits to sentence
m (→‎Purpose: Minor edits to last sentence in this section)
m (→‎Purpose: Minor edits to sentence)
Line 11: Line 11:
A CA Operator MUST initially notify Mozilla about a Reportable Vulnerability as soon as possible and no later than 24 hours of internal identification or notification by an external party.  
A CA Operator MUST initially notify Mozilla about a Reportable Vulnerability as soon as possible and no later than 24 hours of internal identification or notification by an external party.  


Please be sure to read all material provided below to guide you in assessing and reporting a serious vulnerability or security incident.
Please be sure to read all material provided below for guidance in assessing and reporting serious vulnerabilities and security incidents to Mozilla.


=== How to Disclose a Reportable Vulnerability ===
=== How to Disclose a Reportable Vulnerability ===
Confirmed users
569

edits

Navigation menu