CA:ImprovingRevocation: Difference between revisions

CA:ImprovingRevocation (view source)

415 bytes removed , 5 September 2013

Confirmed users, Administrators

5,526

edits

@@ Line 170: / Line 170: @@
 * Mistakenly set isCA=true
-'''Time Frame''' for Notification: within 24 hours of revocation of such a certificate
+'''Time Frame''' for Notification: Same time frame as for revocation of intermediate certs?
-'''How''' to notify Mozilla of a revocation:
+'''How''' to notify Mozilla of a revocation: Same method as used for revocation of intermediate certs?
-* If the revocation is due to a security concern or of revocation of a website certificate whose revocation was not prompted by the certificate owner, send email to security@mozilla.org.
-* To notify us of a certificate revocation, submit a bug report into the mozilla.org Bugzilla system, filed against the "CA Certificates" component of the "NSS" product. Whenever possible, the CA should send us the revoked certificate itself, along with the rfc5280 revocation reason code.
 * Process Change: To be determined.