Confirmed users
578
edits
(Updated information about v.3.0) |
m (→2.9: Added reference to section 7.4) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
__NOTOC__ | __NOTOC__ | ||
| Line 6: | Line 4: | ||
* [https://github.com/mozilla/pkipolicy/blob/3.0/rootstore/policy.md Policy document] | * [https://github.com/mozilla/pkipolicy/blob/3.0/rootstore/policy.md Policy document] | ||
* Finalized date (GitHub): February 20, 2025 | * Finalized date (GitHub): February 20, 2025 | ||
* Publication date (www.mozilla.org): February | * Publication date (www.mozilla.org): February 24, 2025 | ||
* Effective (compliance) date: March 15, 2025 | * Effective (compliance) date: March 15, 2025 | ||
** New roots cannot be dual purpose (websites and email), and CA operators with new roots with the websites trust bit enabled must demonstrate automated means for certificate issuance | ** New roots cannot be dual purpose (websites and email), and CA operators with new roots with the websites trust bit enabled must demonstrate automated means for certificate issuance | ||
| Line 25: | Line 23: | ||
** For CAs capable of issuing email certificates, for audit periods ending after October 30, 2023, period-of-time audits must be performed in accordance WebTrust/ETSI criteria | ** For CAs capable of issuing email certificates, for audit periods ending after October 30, 2023, period-of-time audits must be performed in accordance WebTrust/ETSI criteria | ||
** For CAs capable of issuing TLS server certificates, compliance self-assessments must be submitted for “BR Audit Period End Dates” after December 31, 2023 | ** For CAs capable of issuing TLS server certificates, compliance self-assessments must be submitted for “BR Audit Period End Dates” after December 31, 2023 | ||
* Added section 7.4 Root CA Lifecycles | |||
* [https://github.com/mozilla/pkipolicy/pull/273/files List of changes and diff] | * [https://github.com/mozilla/pkipolicy/pull/273/files List of changes and diff] | ||