CA/Incident Dashboard: Difference between revisions

m
(Fixed typo in wiki markdown)
 
(9 intermediate revisions by 3 users not shown)
Line 2: Line 2:


== Open CA Compliance Bugs ==
== Open CA Compliance Bugs ==
A CA compliance bug relates to a concern about a CA's certificates failing to comply with [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ Mozilla's CA Certificate Policy] and/or the [https://cabforum.org/baseline-requirements-documents/ CA/Browser Forum's Baseline Requirements], and is determined to not be an [https://www.mozilla.org/en-US/security/#For_Developers imminent security concern]. A CA's response to CA compliance bug includes providing an [[CA/Responding_To_An_Incident#Incident_Report|Incident Report]] in the bug.
A CA compliance bug relates to a concern about a CA's certificates failing to comply with [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ Mozilla's CA Certificate Policy] and/or a [https://cabforum.org/ CA/Browser Forum] requirement, and is determined to not be an [https://www.mozilla.org/en-US/security/#For_Developers imminent security concern]. A CA's response to a CA compliance bug includes providing an [[CA/Responding_To_An_Incident#Incident_Report|Incident Report]] in the bug.
   
   
Anyone may create a CA Compliance bug as follows:
Anyone may create a CA Compliance bug as follows:
Line 20: Line 20:
         "f3": "status_whiteboard",
         "f3": "status_whiteboard",
         "o3": "nowordssubstr",
         "o3": "nowordssubstr",
         "v3": "delayed-revocation",
         "v3": "leaf-revocation-delay",
        "f4": "status_whiteboard",
         "o4": "nowordssubstr",
         "o4": "nowordssubstr",
         "v4": "audit-delay",
         "v4": "audit-delay",
         "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
         "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time, creation_time",
        "order": "short_desc ASC"
     }
     }
</bugzilla>
</bugzilla>
Line 44: Line 46:
         "o3": "allwordssubstr",
         "o3": "allwordssubstr",
         "v3": "audit-delay",
         "v3": "audit-delay",
         "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
         "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time, creation_time",
        "order": "short_desc ASC"
     }
     }
</bugzilla>
</bugzilla>


== Revocation Delays ==
== Revocation Delays ==
The compliance bug's whiteboard field is tagged with [delayed-revocation-ca] or [delayed-revocation-leaf] whenever a CA fails to abide by Mozilla's requirement to revoke certificates in a timely fashion. As discussed in [[CA/Responding_To_An_Incident#Revocation]], Mozilla recognizes that there may be *exceptional* situations that cause a CA to not abide by the Baseline Requirements, which should be accompanied by an [[CA/Responding_To_An_Incident#Incident_Report|Incident Report]].
The compliance bug's whiteboard field is tagged with [ca-revocation-delay] or [leaf-revocation-delay] whenever a CA fails to abide by Mozilla's requirement to revoke certificates in a timely fashion. As discussed in [[CA/Responding_To_An_Incident#Revocation]], Mozilla recognizes that there may be *exceptional* situations that cause a CA to not abide by the Baseline Requirements, which should be accompanied by an [[CA/Responding_To_An_Incident#Incident_Report|Incident Report]].


Such bugs should be reported as [[CA/Bug_Triage#Compliance_Problems_and_Incidents|CA compliance issues]], and will be categorized appropriately during triage.
Such bugs should be reported as [[CA/Bug_Triage#Compliance_Problems_and_Incidents|CA compliance issues]], and will be categorized appropriately during triage.
Line 64: Line 67:
         "f3": "status_whiteboard",
         "f3": "status_whiteboard",
         "o3": "allwordssubstr",
         "o3": "allwordssubstr",
         "v3": "delayed-revocation",
         "v3": "leaf-revocation-delay",
        "include_fields": ["id", "summary", "status", "assigned_to", "whiteboard", "last_change_time"]
      "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time, creation_time",
        "order": "short_desc ASC"
     }
     }
</bugzilla>
</bugzilla>


= Closed CA Bugs =
= Closed CA Bugs =
Confirmed users
377

edits