CA:Schedule: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Start assigning rough priorities)
(Add links to pending list)
Line 20: Line 20:
* length of time the CA has been in the queue
* length of time the CA has been in the queue
* whether information gathering for the CA has been completed
* whether information gathering for the CA has been completed
* whether the request is for EV status
* whether the request is for EV status or not
* market share of the CA
* market share of the CA
* size and importance of the CA's geographic market
* size and importance of the CA's geographic market
* for government CAs, whether the government is national or regional


Tentative priority assignments:
The following are tentative priority assignments; note that CAs within each group are listed in alphabetical order:
* Higher priority: KISA, SECOM Trust, FNMT, ICP-Brasil, WISeKey, T-system Trust Center, Chunghwa Telecom eCA
* Higher priority: Chunghwa Telecom eCA, FNMT, ICP-Brasil, KISA, SECOM Trust, T-Systems, WISeKey
* Normal priority: DCSSI
* Normal priority: Certigna, DCSSI, Microsec, TC TrustCenter, Trustis
* Lower priority: ACCV, CATCert, ARGEN DATA, Izenpe
* Lower priority: ACCV, ARGE DATEN, CATCert, Izenpe


=== Target schedule ===
=== Target schedule ===


The current schedule is predicated on our starting public discussion on one new CA each week.
The current tentative schedule is predicated on our starting public discussion for one new CA each week; this may be modified as we gain more experience with the schedule.


{|
{|
|-
|-
! Date || CA || Bug(s) || Notes
! Start public comment || CA || Bug(s) || Geographic focus || Notes
|-
|-
| 2008/09/29 || TBD || TBD || TBD
| 2008/09/29 || TBD || TBD || TBD
Line 41: Line 42:
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#ACCV ACCV] || [http://bugzilla.mozilla.org/show_bug.cgi?id=274100 274100] || Spain || regional government CA
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#ACCV ACCV] || [http://bugzilla.mozilla.org/show_bug.cgi?id=274100 274100] || Spain || regional government CA
|-
|-
| not scheduled || CATCert || [http://bugzilla.mozilla.org/show_bug.cgi?id=295474 295474] || Spain || regional government CA
| not scheduled || CATCert || [http://bugzilla.mozilla.org/show_bug.cgi?id=295474 295474] || Spain || regional government CA, add to pending list
|-
|-
| not scheduled || Trustis || [http://bugzilla.mozilla.org/show_bug.cgi?id=324126 324126] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Trustis Trustis] || [http://bugzilla.mozilla.org/show_bug.cgi?id=324126 324126] || Europe ||
|-
|-
| not scheduled || KISA || [http://bugzilla.mozilla.org/show_bug.cgi?id=335197 335197] || Korea || national government CA
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#KISA KISA] || [http://bugzilla.mozilla.org/show_bug.cgi?id=335197 335197] || Korea || national government CA
|-
|-
| not scheduled || ARGE DATEN || [http://bugzilla.mozilla.org/show_bug.cgi?id=348987 348987] || Austria ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#ARGE%20DATEN ARGE DATEN] || [http://bugzilla.mozilla.org/show_bug.cgi?id=348987 348987] || Austria ||
|-
|-
| not scheduled || Izenpe || [http://bugzilla.mozilla.org/show_bug.cgi?id=361957 361957] || Spain || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Izenpe Izenpe] || [http://bugzilla.mozilla.org/show_bug.cgi?id=361957 361957] || Spain || EV
|-
|-
| not scheduled || DCSSI || [http://bugzilla.mozilla.org/show_bug.cgi?id=368970 368970] || France || national government CA
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#DCSSI DCSSI] || [http://bugzilla.mozilla.org/show_bug.cgi?id=368970 368970] || France || national government CA
|-
|-
| not scheduled || DigiNotar || [http://bugzilla.mozilla.org/show_bug.cgi?id=369357 369357] || Netherlands || EV
| not scheduled || DigiNotar || [http://bugzilla.mozilla.org/show_bug.cgi?id=369357 369357] || Netherlands || EV, add to pending list
|-
|-
| not scheduled || Microsec Ltd || [http://bugzilla.mozilla.org/show_bug.cgi?id=370505 370505] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Microsec Microsec Ltd] || [http://bugzilla.mozilla.org/show_bug.cgi?id=370505 370505] || Hungary ||
|-
|-
| not scheduled || S-TRUST || [http://bugzilla.mozilla.org/show_bug.cgi?id=370627 370627] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#S-TRUST S-TRUST] || [http://bugzilla.mozilla.org/show_bug.cgi?id=370627 370627] || Germany ||
|-
|-
| not scheduled || WISeKey || [http://bugzilla.mozilla.org/show_bug.cgi?id=371362 371362] || N/A ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#WISeKey WISeKey] || [http://bugzilla.mozilla.org/show_bug.cgi?id=371362 371362] || global ||
|-
|-
| not scheduled || T-system Trust Center || [http://bugzilla.mozilla.org/show_bug.cgi?id=378882 378882] || Germany ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#T-Systems T-Systems] || [http://bugzilla.mozilla.org/show_bug.cgi?id=378882 378882] || Germany || need CPSs for subordinate CAs
|-
|-
| not scheduled || Lithuanian National Root || [http://bugzilla.mozilla.org/show_bug.cgi?id=379152 379152] || Lithuania ||
| not scheduled || Lithuanian National Root || [http://bugzilla.mozilla.org/show_bug.cgi?id=379152 379152] || Lithuania || national government CA, add to pending list
|-
|-
| not scheduled || Kamu Sertifikasyon Merkezi || [http://bugzilla.mozilla.org/show_bug.cgi?id=381974 381974] || Turkey ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Kamu%20SM Kamu Sertifikasyon Merkezi] || [http://bugzilla.mozilla.org/show_bug.cgi?id=381974 381974] || Turkey || national government CA
|-
|-
| not scheduled || TC TrustCenter || [http://bugzilla.mozilla.org/show_bug.cgi?id=392024 392024] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#TC%20TrustCenter TC TrustCenter] || [http://bugzilla.mozilla.org/show_bug.cgi?id=392024 392024] || Germany ||
|-
|-
| not scheduled || Certigna || [http://bugzilla.mozilla.org/show_bug.cgi?id=393166 393166] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Certigna%20of%20Dhimyotis Certigna] || [http://bugzilla.mozilla.org/show_bug.cgi?id=393166 393166] || Europe ||
|-
|-
| not scheduled || SECOM Trust || [http://bugzilla.mozilla.org/show_bug.cgi?id=394419 394419] || Japan || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#SECOM%20Trust SECOM Trust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=394419 394419] || Japan || EV
|-
|-
| not scheduled || Certicámara SA || [http://bugzilla.mozilla.org/show_bug.cgi?id=401262 401262] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Certicamara%20S.A. Certicámara SA] || [http://bugzilla.mozilla.org/show_bug.cgi?id=401262 401262] || Spain ||
|-
|-
| not scheduled || Comodo || [http://bugzilla.mozilla.org/show_bug.cgi?id=401587 401587] || n/a || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Comodo Comodo] || [http://bugzilla.mozilla.org/show_bug.cgi?id=401587 401587] || global || EV
|-
|-
| not scheduled || VeriSign || [http://bugzilla.mozilla.org/show_bug.cgi?id=402947 402947] || n/a || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#VeriSign VeriSign] || [http://bugzilla.mozilla.org/show_bug.cgi?id=402947 402947] || global || EV
|-
|-
| not scheduled || GlobalSign || [http://bugzilla.mozilla.org/show_bug.cgi?id=406796 406796] || n/a || EV
| not scheduled || Camerifirma || [http://bugzilla.mozilla.org/show_bug.cgi?id=406968 406968] || Spain ||
|-
|-
| not scheduled || Camerifirma || [http://bugzilla.mozilla.org/show_bug.cgi?id=406968 406968] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#thawte thawte] || [http://bugzilla.mozilla.org/show_bug.cgi?id=407163 407163] || global || EV
|-
|-
| not scheduled || thawte || [http://bugzilla.mozilla.org/show_bug.cgi?id=407163 407163] || n/a || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#GeoTrust GeoTrust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=407168 407168] || global || EV
|-
|-
| not scheduled || GeoTrust || [http://bugzilla.mozilla.org/show_bug.cgi?id=407168 407168] || n/a || EV
| not scheduled || Hongkong Post || [http://bugzilla.mozilla.org/show_bug.cgi?id=408949 408949] || China || need entry on pending list
|-
|-
| not scheduled || Hongkong Post || [http://bugzilla.mozilla.org/show_bug.cgi?id=408949 408949] || China ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#VeriSign Verisign] || [http://bugzilla.mozilla.org/show_bug.cgi?id=409235 409235] || global || ECC
|-
|-
| not scheduled || Verisign || [http://bugzilla.mozilla.org/show_bug.cgi?id=409235 409235] || n/a || ECC
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#GeoTrust GeoTrust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=409236 409236] || global || ECC
|-
|-
| not scheduled || GeoTrust || [http://bugzilla.mozilla.org/show_bug.cgi?id=409236 409236] || n/a || ECC
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#thawte thawte] || [http://bugzilla.mozilla.org/show_bug.cgi?id=409237 409237] || global || ECC
|-
|-
| not scheduled || thawte || [http://bugzilla.mozilla.org/show_bug.cgi?id=409237 409237] || n/a || ECC
| not scheduled || VAS "Latvijas Pasts" || [http://bugzilla.mozilla.org/show_bug.cgi?id=412747 412747] || Latvia || add to pending list
|-
|-
| not scheduled || VAS "Latvijas Pasts" || [http://bugzilla.mozilla.org/show_bug.cgi?id=412747 412747] || Latvia ||
| not scheduled || Sertifitseerimiskeskus AS || [http://bugzilla.mozilla.org/show_bug.cgi?id=414520 414520] || Baltic region || add to pending list
|-
|-
| not scheduled || Sertifitseerimiskeskus AS || [http://bugzilla.mozilla.org/show_bug.cgi?id=414520 414520] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Entrust Entrust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=416544 416544] || global || EV
|-
|-
| not scheduled || Entrust || [http://bugzilla.mozilla.org/show_bug.cgi?id=416544 416544] || n/a || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#ComSign Comsign] || [http://bugzilla.mozilla.org/show_bug.cgi?id=420705 420705] || Israel ||
|-
|-
| not scheduled || Comsign || [http://bugzilla.mozilla.org/show_bug.cgi?id=420705 420705] || ? ||
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#VeriSign VeriSign], [http://www.mozilla.org/projects/security/certs/pending/#GeoTrust GeoTrust] and [http://www.mozilla.org/projects/security/certs/pending/#thawte thawte] || [http://bugzilla.mozilla.org/show_bug.cgi?id=420760 420760] || global || EV, no longer needed?
|-
|-
| not scheduled || Verisign, GeoTrust and thawte || [http://bugzilla.mozilla.org/show_bug.cgi?id=420760 420760] || n/a || EV, no longer needed?
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Verizon%20/%20Cybertrust Verizon/CyberTrust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=430694 430694] || global || EV
|-
|-
| not scheduled || GTE CyberTrust || [http://bugzilla.mozilla.org/show_bug.cgi?id=430694 430694] || n/a || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Verizon%20/%20Cybertrust Verizon/CyberTrust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=430698 430698] || global || EV
|-
|-
| not scheduled || Baltimore CyberTrust || [http://bugzilla.mozilla.org/show_bug.cgi?id=430698 430698] || n/a || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#Verizon%20/%20Cybertrust Verizon/Cybertrust] || [http://bugzilla.mozilla.org/show_bug.cgi?id=430700 430700] || global || EV
|-
|-
| not scheduled || Cybertrust || [http://bugzilla.mozilla.org/show_bug.cgi?id=430700 430700] || n/a || EV
| not scheduled || TÜRKTRUST || [http://bugzilla.mozilla.org/show_bug.cgi?id=433845 433845] || Turkey || add to pending list
|-
|-
| not scheduled || TÜRKTRUST || [http://bugzilla.mozilla.org/show_bug.cgi?id=433845 433845] || Turkey ||
| not scheduled || Swiss BIT || [http://bugzilla.mozilla.org/show_bug.cgi?id=435026 435026] || Switzerland || add to pending list
|-
|-
| not scheduled || Swiss BIT || [http://bugzilla.mozilla.org/show_bug.cgi?id=435026 435026] || Switzerland ||
| not scheduled || FNMT || [http://bugzilla.mozilla.org/show_bug.cgi?id=435736 435736] || Spain || national government CA, add to pending list
|-
|-
| not scheduled || FNMT || [http://bugzilla.mozilla.org/show_bug.cgi?id=435736 435736] || Spain || national government CA
| not scheduled || Staat der Nederlanden || [http://bugzilla.mozilla.org/show_bug.cgi?id=436056 436056] || Netherlands || national government CA, add to pending list
|-
|-
| not scheduled || Staat der Nederlanden || [http://bugzilla.mozilla.org/show_bug.cgi?id=436056 436056] || Netherlands || national government CA
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#TC%20TrustCenter TC TrustCenter] || [http://bugzilla.mozilla.org/show_bug.cgi?id=436467 436467] || Germany || EV
|-
|-
| not scheduled || TC TrustCenter || [http://bugzilla.mozilla.org/show_bug.cgi?id=436467 436467] || ? || EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#ICP-Brasil ICP-Brasil] || [http://bugzilla.mozilla.org/show_bug.cgi?id=438825 438825] || Brazil || national government CA
|-
|-
| not scheduled || ICP-Brasil || [http://bugzilla.mozilla.org/show_bug.cgi?id=438825 438825] || Brazil || national government CA
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#E-TUGRA E-Tugra] || [http://bugzilla.mozilla.org/show_bug.cgi?id=443653 443653] || Turkey ||
|-
|-
| not scheduled || E-Tugra || [http://bugzilla.mozilla.org/show_bug.cgi?id=443653 443653] || ? ||
| not scheduled || Chunghwa Telecom eCA || [http://bugzilla.mozilla.org/show_bug.cgi?id=448794 448794] || Taiwan || add to pending list
|-
|-
| not scheduled || Chunghwa Telecom eCA || [http://bugzilla.mozilla.org/show_bug.cgi?id=448794 448794] || ? ||
| not scheduled || StartCom || [http://bugzilla.mozilla.org/show_bug.cgi?id=451298 451298] || Israel || add code signing and EV
, add to pending list
|-
|-
| not scheduled || StartCom || [http://bugzilla.mozilla.org/show_bug.cgi?id=451298 451298] || Israel || add code signing, EV
| not scheduled || [http://www.mozilla.org/projects/security/certs/pending/#SwissSign SwissSign] || [http://bugzilla.mozilla.org/show_bug.cgi?id=453460 453460] || Switzerland || EV
|-
|-
| not scheduled || SwissSign || [http://bugzilla.mozilla.org/show_bug.cgi?id=453460 453460] || Switzerland || EV
| not scheduled || Disig || [http://bugzilla.mozilla.org/show_bug.cgi?id=455878 455878] || Slovakia || add to pending list
|-
| not scheduled || Disig || [http://bugzilla.mozilla.org/show_bug.cgi?id=455878 455878] || ? ||
|}
|}

Revision as of 14:50, 30 September 2008

Schedule for CA evaluations

Note that this schedule is tentative and may change without warning based on unforeseen circumstances. Nothing in this schedule shall be construed as a commitment by the Mozilla Foundation or the Mozilla project in general.

General timeline

Our process for evaluating CA requests is as follows:

  1. We assign CAs into different groups according to the general priority of processing their requests, and then assign each CA a specific target date for beginning public discussion of their request(s).
  2. Prior to the target date for a CA we gather any needed information from the CA; if for some reason we cannot obtain the needed information then we will postpone consideration of the CA and schedule some other CA for that target date.
  3. Once a CA enters the public discussion period we allow one week for public comment on the CA's request, after which we will make a preliminary determination as to whether the request should be approved or not.
  4. If a request receives preliminary approval then we have a second one-week comment period prior to final approval.
  5. If a request receives final approval then we will file bugs against the appropriate developer(s) to have the necessary changes made to NSS (for CA root inclusion) or PSM (for EV-enabling a CA) or both.
  6. If a request does not receive preliminary or final approval then it will be put back in the queue and reassigned a new target date.

Once bugs are filed against NSS and/or PSM the schedule is set first by the NSS/PSM developer(s) (for making the technical changes) and then by the product teams for Firefox and other products (to include the new changes in a release of Firefox, etc.)

Priority groups

CAs are assigned priorities based on the following factors, among others:

  • length of time the CA has been in the queue
  • whether information gathering for the CA has been completed
  • whether the request is for EV status or not
  • market share of the CA
  • size and importance of the CA's geographic market
  • for government CAs, whether the government is national or regional

The following are tentative priority assignments; note that CAs within each group are listed in alphabetical order:

  • Higher priority: Chunghwa Telecom eCA, FNMT, ICP-Brasil, KISA, SECOM Trust, T-Systems, WISeKey
  • Normal priority: Certigna, DCSSI, Microsec, TC TrustCenter, Trustis
  • Lower priority: ACCV, ARGE DATEN, CATCert, Izenpe

Target schedule

The current tentative schedule is predicated on our starting public discussion for one new CA each week; this may be modified as we gain more experience with the schedule.

Start public comment CA Bug(s) Geographic focus Notes
2008/09/29 TBD TBD TBD
not scheduled ACCV 274100 Spain regional government CA
not scheduled CATCert 295474 Spain regional government CA, add to pending list
not scheduled Trustis 324126 Europe
not scheduled KISA 335197 Korea national government CA
not scheduled ARGE DATEN 348987 Austria
not scheduled Izenpe 361957 Spain EV
not scheduled DCSSI 368970 France national government CA
not scheduled DigiNotar 369357 Netherlands EV, add to pending list
not scheduled Microsec Ltd 370505 Hungary
not scheduled S-TRUST 370627 Germany
not scheduled WISeKey 371362 global
not scheduled T-Systems 378882 Germany need CPSs for subordinate CAs
not scheduled Lithuanian National Root 379152 Lithuania national government CA, add to pending list
not scheduled Kamu Sertifikasyon Merkezi 381974 Turkey national government CA
not scheduled TC TrustCenter 392024 Germany
not scheduled Certigna 393166 Europe
not scheduled SECOM Trust 394419 Japan EV
not scheduled Certicámara SA 401262 Spain
not scheduled Comodo 401587 global EV
not scheduled VeriSign 402947 global EV
not scheduled Camerifirma 406968 Spain
not scheduled thawte 407163 global EV
not scheduled GeoTrust 407168 global EV
not scheduled Hongkong Post 408949 China need entry on pending list
not scheduled Verisign 409235 global ECC
not scheduled GeoTrust 409236 global ECC
not scheduled thawte 409237 global ECC
not scheduled VAS "Latvijas Pasts" 412747 Latvia add to pending list
not scheduled Sertifitseerimiskeskus AS 414520 Baltic region add to pending list
not scheduled Entrust 416544 global EV
not scheduled Comsign 420705 Israel
not scheduled VeriSign, GeoTrust and thawte 420760 global EV, no longer needed?
not scheduled Verizon/CyberTrust 430694 global EV
not scheduled Verizon/CyberTrust 430698 global EV
not scheduled Verizon/Cybertrust 430700 global EV
not scheduled TÜRKTRUST 433845 Turkey add to pending list
not scheduled Swiss BIT 435026 Switzerland add to pending list
not scheduled FNMT 435736 Spain national government CA, add to pending list
not scheduled Staat der Nederlanden 436056 Netherlands national government CA, add to pending list
not scheduled TC TrustCenter 436467 Germany EV
not scheduled ICP-Brasil 438825 Brazil national government CA
not scheduled E-Tugra 443653 Turkey
not scheduled Chunghwa Telecom eCA 448794 Taiwan add to pending list
not scheduled StartCom 451298 Israel add code signing and EV

, add to pending list

not scheduled SwissSign 453460 Switzerland EV
not scheduled Disig 455878 Slovakia add to pending list
Retrieved from "https://wiki.allizom.org/index.php?title=CA:Schedule&oldid=110676"