CA:Schedule: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Added links to bugs)
(Start assigning rough priorities)
Line 24: Line 24:
* size and importance of the CA's geographic market
* size and importance of the CA's geographic market


To be written.
Tentative priority assignments:
* Higher priority: KISA, SECOM Trust, FNMT, ICP-Brasil, WISeKey, T-system Trust Center, Chunghwa Telecom eCA
* Normal priority: DCSSI
* Lower priority: ACCV, CATCert, ARGEN DATA, Izenpe


=== Target schedule ===
=== Target schedule ===

Revision as of 18:00, 29 September 2008

Schedule for CA evaluations

Note that this schedule is tentative and may change without warning based on unforeseen circumstances. Nothing in this schedule shall be construed as a commitment by the Mozilla Foundation or the Mozilla project in general.

General timeline

Our process for evaluating CA requests is as follows:

  1. We assign CAs into different groups according to the general priority of processing their requests, and then assign each CA a specific target date for beginning public discussion of their request(s).
  2. Prior to the target date for a CA we gather any needed information from the CA; if for some reason we cannot obtain the needed information then we will postpone consideration of the CA and schedule some other CA for that target date.
  3. Once a CA enters the public discussion period we allow one week for public comment on the CA's request, after which we will make a preliminary determination as to whether the request should be approved or not.
  4. If a request receives preliminary approval then we have a second one-week comment period prior to final approval.
  5. If a request receives final approval then we will file bugs against the appropriate developer(s) to have the necessary changes made to NSS (for CA root inclusion) or PSM (for EV-enabling a CA) or both.
  6. If a request does not receive preliminary or final approval then it will be put back in the queue and reassigned a new target date.

Once bugs are filed against NSS and/or PSM the schedule is set first by the NSS/PSM developer(s) (for making the technical changes) and then by the product teams for Firefox and other products (to include the new changes in a release of Firefox, etc.)

Priority groups

CAs are assigned priorities based on the following factors, among others:

  • length of time the CA has been in the queue
  • whether information gathering for the CA has been completed
  • whether the request is for EV status
  • market share of the CA
  • size and importance of the CA's geographic market

Tentative priority assignments:

  • Higher priority: KISA, SECOM Trust, FNMT, ICP-Brasil, WISeKey, T-system Trust Center, Chunghwa Telecom eCA
  • Normal priority: DCSSI
  • Lower priority: ACCV, CATCert, ARGEN DATA, Izenpe

Target schedule

The current schedule is predicated on our starting public discussion on one new CA each week.

Date CA Bug(s) Notes
2008/09/29 TBD TBD TBD
not scheduled ACCV 274100 Spain regional government CA
not scheduled CATCert 295474 Spain regional government CA
not scheduled Trustis 324126 ?
not scheduled KISA 335197 Korea national government CA
not scheduled ARGE DATEN 348987 Austria
not scheduled Izenpe 361957 Spain EV
not scheduled DCSSI 368970 France national government CA
not scheduled DigiNotar 369357 Netherlands EV
not scheduled Microsec Ltd 370505 ?
not scheduled S-TRUST 370627 ?
not scheduled WISeKey 371362 N/A
not scheduled T-system Trust Center 378882 Germany
not scheduled Lithuanian National Root 379152 Lithuania
not scheduled Kamu Sertifikasyon Merkezi 381974 Turkey
not scheduled TC TrustCenter 392024 ?
not scheduled Certigna 393166 ?
not scheduled SECOM Trust 394419 Japan EV
not scheduled Certicámara SA 401262 ?
not scheduled Comodo 401587 n/a EV
not scheduled VeriSign 402947 n/a EV
not scheduled GlobalSign 406796 n/a EV
not scheduled Camerifirma 406968 ?
not scheduled thawte 407163 n/a EV
not scheduled GeoTrust 407168 n/a EV
not scheduled Hongkong Post 408949 China
not scheduled Verisign 409235 n/a ECC
not scheduled GeoTrust 409236 n/a ECC
not scheduled thawte 409237 n/a ECC
not scheduled VAS "Latvijas Pasts" 412747 Latvia
not scheduled Sertifitseerimiskeskus AS 414520 ?
not scheduled Entrust 416544 n/a EV
not scheduled Comsign 420705 ?
not scheduled Verisign, GeoTrust and thawte 420760 n/a EV, no longer needed?
not scheduled GTE CyberTrust 430694 n/a EV
not scheduled Baltimore CyberTrust 430698 n/a EV
not scheduled Cybertrust 430700 n/a EV
not scheduled TÜRKTRUST 433845 Turkey
not scheduled Swiss BIT 435026 Switzerland
not scheduled FNMT 435736 Spain national government CA
not scheduled Staat der Nederlanden 436056 Netherlands national government CA
not scheduled TC TrustCenter 436467 ? EV
not scheduled ICP-Brasil 438825 Brazil national government CA
not scheduled E-Tugra 443653 ?
not scheduled Chunghwa Telecom eCA 448794 ?
not scheduled StartCom 451298 Israel add code signing, EV
not scheduled SwissSign 453460 Switzerland EV
not scheduled Disig 455878 ?