CA/Root Store Policy Archive: Difference between revisions

CA/Root Store Policy Archive (view source)

45 bytes removed , 13 November 2013

m

Confirmed users, Administrators

5,526

edits

@@ Line 76: / Line 76: @@
 The following items will be discussed in regards to version 2.3 of [http://www.mozilla.org/projects/security/certs/policy/WorkInProgress Mozilla's CA Certificate Policy.]
-* Deprecate SHA-1 Hash Algorithms in certs. [http://social.technet.microsoft.com/wiki/contents/articles/3281.introduction-to-the-microsoft-root-certificate-program.aspx MS Policy:] "NEW The [http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2880823-recommendation-to-discontinue-use-of-sha-1.aspx Security Research and Defense (SRD) Blog] now describes the SHA1 Deprecation Policy.  Microsoft Security Advisory [https://technet.microsoft.com/en-us/security/advisory/2880823 2880823] also gives a bit more detail."
+* Deprecate SHA-1 Hash Algorithms in certs. [http://social.technet.microsoft.com/wiki/contents/articles/3281.introduction-to-the-microsoft-root-certificate-program.aspx MS Policy:] "NEW The [http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx Security Research and Defense (SRD) Blog] now describes the SHA1 Deprecation Policy.  Microsoft Security Advisory [https://technet.microsoft.com/en-us/security/advisory/2880823 2880823] also gives a bit more detail."
 * Policy changes regarding [https://wiki.mozilla.org/CA:ImprovingRevocation Improving Revocation.]
 * Audit equivalencies from Government CAs MUST incorporate the CABF BR into their local audit criteria.