canmove, Confirmed users
1,537
edits
Line 28: | Line 28: | ||
* {{ok|SSL Error Reporting finish first implementation of ssl error reporting feature.}} (dri=grobinson) | * {{ok|SSL Error Reporting finish first implementation of ssl error reporting feature.}} (dri=grobinson) | ||
* {{ok|HPKP - implement pinning http header}} (dri=cviecco) | * {{ok|HPKP - implement pinning http header}} (dri=cviecco) | ||
* {{done| Update roadmap for Cert Revocation improvements}} (dri=rbarnes) | * {{done| Update [[CA:RevocationPlan|roadmap for Cert Revocation improvements]]}} (dri=rbarnes) | ||
* {{done| Create a mechanism to provision phones with an alternate cert}} (dri=mgoodwin) | * {{done| Create a mechanism to provision phones with an alternate cert}} (dri=mgoodwin) | ||
* {{ | * {{done| Add measurement/enforcement of compliance with CABF Baseline Requirements}}. See {{bug|1050546}} (dri=keeler) | ||
* {{ok| Create a tool for testing CA certificate compliance and EV-readiness}} (dri=keeler) | * {{ok| Create a tool for testing CA certificate compliance and EV-readiness}}. See {{bug|926599}} and {{bug|1029095}} (dri=keeler) | ||
* {{ok| Add support for key wrap/unwrap and ECC in WebCrypto}} (dri=rbarnes) | * {{ok| Add support for key wrap/unwrap and ECC in WebCrypto}} (dri=rbarnes) | ||
* {{risk| ''[stretch goal]'' Enable revocation of intermediate CAs through block list service}} (dri= | * {{risk| ''[stretch goal]'' Enable revocation of intermediate CAs through block list service}} (dri=mgoodwin, keeler) | ||
* {{done| ''[stretch goal]'' Retire first batch of 1024-bit roots, working towards requiring 2048-bit keys for built-in root certificates}} (dri=kathleen) | * {{done| ''[stretch goal]'' Retire first batch of 1024-bit roots, working towards requiring 2048-bit keys for built-in root certificates}} (dri=kathleen) | ||
* {{ok| ''[stretch goal]'' Get CA Program data into one database}} (dri=kathleen) | * {{ok| ''[stretch goal]'' Get CA Program data into one database}} (dri=kathleen) |