CA/Root Store Policy Archive: Difference between revisions

m
→‎2.9: Added reference to section 7.4
(Updated information about v.3.0)
m (→‎2.9: Added reference to section 7.4)
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{Draft}}
__NOTOC__
__NOTOC__


Line 6: Line 4:
* [https://github.com/mozilla/pkipolicy/blob/3.0/rootstore/policy.md Policy document]
* [https://github.com/mozilla/pkipolicy/blob/3.0/rootstore/policy.md Policy document]
* Finalized date (GitHub): February 20, 2025
* Finalized date (GitHub): February 20, 2025
* Publication date (www.mozilla.org): February XX, 2025
* Publication date (www.mozilla.org): February 24, 2025
* Effective (compliance) date: March 15, 2025
* Effective (compliance) date: March 15, 2025
** New roots cannot be dual purpose (websites and email), and CA operators with new roots with the websites trust bit enabled must demonstrate automated means for certificate issuance
** New roots cannot be dual purpose (websites and email), and CA operators with new roots with the websites trust bit enabled must demonstrate automated means for certificate issuance
Line 25: Line 23:
** For CAs capable of issuing email certificates, for audit periods ending after October 30, 2023, period-of-time audits must be performed in accordance WebTrust/ETSI criteria
** For CAs capable of issuing email certificates, for audit periods ending after October 30, 2023, period-of-time audits must be performed in accordance WebTrust/ETSI criteria
** For CAs capable of issuing TLS server certificates, compliance self-assessments must be submitted for “BR Audit Period End Dates” after December 31, 2023
** For CAs capable of issuing TLS server certificates, compliance self-assessments must be submitted for “BR Audit Period End Dates” after December 31, 2023
* Added section 7.4 Root CA Lifecycles
* [https://github.com/mozilla/pkipolicy/pull/273/files List of changes and diff]
* [https://github.com/mozilla/pkipolicy/pull/273/files List of changes and diff]


Confirmed users
578

edits