Confirmed users
377
edits
(Fixed typo in wiki markdown) |
m (→Open CA Compliance Bugs: Minor edit) |
||
(9 intermediate revisions by 3 users not shown) | |||
Line 2: | Line 2: | ||
== Open CA Compliance Bugs == | == Open CA Compliance Bugs == | ||
A CA compliance bug relates to a concern about a CA's certificates failing to comply with [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ Mozilla's CA Certificate Policy] and/or | A CA compliance bug relates to a concern about a CA's certificates failing to comply with [https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ Mozilla's CA Certificate Policy] and/or a [https://cabforum.org/ CA/Browser Forum] requirement, and is determined to not be an [https://www.mozilla.org/en-US/security/#For_Developers imminent security concern]. A CA's response to a CA compliance bug includes providing an [[CA/Responding_To_An_Incident#Incident_Report|Incident Report]] in the bug. | ||
Anyone may create a CA Compliance bug as follows: | Anyone may create a CA Compliance bug as follows: | ||
Line 20: | Line 20: | ||
"f3": "status_whiteboard", | "f3": "status_whiteboard", | ||
"o3": "nowordssubstr", | "o3": "nowordssubstr", | ||
"v3": " | "v3": "leaf-revocation-delay", | ||
"f4": "status_whiteboard", | |||
"o4": "nowordssubstr", | "o4": "nowordssubstr", | ||
"v4": "audit-delay", | "v4": "audit-delay", | ||
"include_fields": | "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time, creation_time", | ||
"order": "short_desc ASC" | |||
} | } | ||
</bugzilla> | </bugzilla> | ||
Line 44: | Line 46: | ||
"o3": "allwordssubstr", | "o3": "allwordssubstr", | ||
"v3": "audit-delay", | "v3": "audit-delay", | ||
"include_fields": | "include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time, creation_time", | ||
"order": "short_desc ASC" | |||
} | } | ||
</bugzilla> | </bugzilla> | ||
== Revocation Delays == | == Revocation Delays == | ||
The compliance bug's whiteboard field is tagged with [ | The compliance bug's whiteboard field is tagged with [ca-revocation-delay] or [leaf-revocation-delay] whenever a CA fails to abide by Mozilla's requirement to revoke certificates in a timely fashion. As discussed in [[CA/Responding_To_An_Incident#Revocation]], Mozilla recognizes that there may be *exceptional* situations that cause a CA to not abide by the Baseline Requirements, which should be accompanied by an [[CA/Responding_To_An_Incident#Incident_Report|Incident Report]]. | ||
Such bugs should be reported as [[CA/Bug_Triage#Compliance_Problems_and_Incidents|CA compliance issues]], and will be categorized appropriately during triage. | Such bugs should be reported as [[CA/Bug_Triage#Compliance_Problems_and_Incidents|CA compliance issues]], and will be categorized appropriately during triage. | ||
Line 64: | Line 67: | ||
"f3": "status_whiteboard", | "f3": "status_whiteboard", | ||
"o3": "allwordssubstr", | "o3": "allwordssubstr", | ||
"v3": " | "v3": "leaf-revocation-delay", | ||
"include_fields": "summary, id, status, assigned_to, whiteboard, last_change_time, creation_time", | |||
"order": "short_desc ASC" | |||
} | } | ||
</bugzilla> | </bugzilla> | ||
= Closed CA Bugs = | = Closed CA Bugs = |