CA/CPS Review: Difference between revisions
< CA
Jump to navigation
Jump to search
(Added TrustAsia) |
m (Edited line re: ecommerce monitoring) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
Here are previous reviews of CP/CPS documents: | Here are previous reviews of CP/CPS documents: | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9342057 Review of TrustAsia's CP/CPS (XLS)] | * [https://bugzilla.mozilla.org/attachment.cgi?id=9369465 Review of Firmaprofesional's CP and CPS (XLS) 2023-12-19] | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9328642 Review of Sectigo's CPS (XLS)] | * [https://bugzilla.mozilla.org/attachment.cgi?id=9366027 Review of PostSignum's CP (XLS) 2023-12-12] | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9328039 Review of Cybertrust Japan's CPS (XLS)] | * [https://bugzilla.mozilla.org/attachment.cgi?id=9357960 Review of Commscope's CP/CPS (XLS) 2023-10-11] | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9327554 Review of SSL.com's CP/CPS (XLS)] | * [https://bugzilla.mozilla.org/attachment.cgi?id=9342057 Review of TrustAsia's CP/CPS (XLS) 2023-07-06] | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9326434 Review of ATOS Trustcenter's CPS (XLS)] | * [https://bugzilla.mozilla.org/attachment.cgi?id=9328642 Review of Sectigo's CPS (XLS) 2023-04-14] | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9328039 Review of Cybertrust Japan's CPS (XLS) 2023-04-19] | |||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9327554 Review of SSL.com's CP/CPS 2023-04-21 (XLS)] | |||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9326434 Review of ATOS Trustcenter's CPS 2023-04-01 (XLS)] | |||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1647181#c24 Second Review of BJCA's CPS] | * [https://bugzilla.mozilla.org/show_bug.cgi?id=1647181#c24 Second Review of BJCA's CPS] | ||
* [https://bugzilla.mozilla.org/attachment.cgi?id=9284758 Review of Fina's CPS and Compliance Self Assessment (XLS)] | * [https://bugzilla.mozilla.org/attachment.cgi?id=9284758 Review of Fina's CPS and Compliance Self Assessment (XLS)] | ||
| Line 31: | Line 34: | ||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1690054#c8 Detailed Extended Validation Review Feedback to HARICA on EV aspects of CP/CPS] | * [https://bugzilla.mozilla.org/show_bug.cgi?id=1690054#c8 Detailed Extended Validation Review Feedback to HARICA on EV aspects of CP/CPS] | ||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1493679#c25 Detailed BR and EV Review Feedback to Network Solutions on CPS] | * [https://bugzilla.mozilla.org/show_bug.cgi?id=1493679#c25 Detailed BR and EV Review Feedback to Network Solutions on CPS] | ||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1627552#c13 Detailed BR and EV Review Feedback to GLOBALTRUST2020 | * [https://bugzilla.mozilla.org/show_bug.cgi?id=1627552#c13 Detailed BR and EV Review Feedback to e-commerce monitoring's (GLOBALTRUST2020) CP/CPS] | ||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1647181#c7 Detailed BR and EV Review Feedback to Beijing CA on CPS] | * [https://bugzilla.mozilla.org/show_bug.cgi?id=1647181#c7 Detailed BR and EV Review Feedback to Beijing CA on CPS] | ||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1579454#c9 Detailed Extended Validation Review Feedback to NetLock on EV aspects of CP/CPS] | * [https://bugzilla.mozilla.org/show_bug.cgi?id=1579454#c9 Detailed Extended Validation Review Feedback to NetLock on EV aspects of CP/CPS] | ||
Latest revision as of 20:49, 14 May 2024
Here are previous reviews of CP/CPS documents:
- Review of Firmaprofesional's CP and CPS (XLS) 2023-12-19
- Review of PostSignum's CP (XLS) 2023-12-12
- Review of Commscope's CP/CPS (XLS) 2023-10-11
- Review of TrustAsia's CP/CPS (XLS) 2023-07-06
- Review of Sectigo's CPS (XLS) 2023-04-14
- Review of Cybertrust Japan's CPS (XLS) 2023-04-19
- Review of SSL.com's CP/CPS 2023-04-21 (XLS)
- Review of ATOS Trustcenter's CPS 2023-04-01 (XLS)
- Second Review of BJCA's CPS
- Review of Fina's CPS and Compliance Self Assessment (XLS)
- Review of Notarius' CPS (email-only)
- Review of Macao Post eSignTrust CPS (email-only)
- Review of DigitalSign's CPS (email-only)
- Review of LAWtrust's CPS (email-only)
- Comments to SERPRO's CPS
- Review of Certainly's CP/CPS (Download full review in XLS attachment)
- Review of SECOM's CPs and CPSes
- Second review of eTugra's CPS
- BR and EV Review on eTugra's CPS (Download full review in XLS attachment)
- BR and EV Review on DigiCert's CP/CPS (Download full review in XLS attachment)
- BR and EV Review on D-TRUST's CP/CPS (Download full review in XLS attachment)
- Detailed Extended Validation Review Feedback to iTrusChina on EV aspects of CP/CPS
- Second Review on ACIN - Global Trusted Sign's CP/CPS
- Detailed BR Review Feedback to Telia on CP/CPS
- BR Review of KIR's CPS
- Detailed BR and EV Review Feedback to ACIN - Global Trusted Sign
- Detailed BR and EV Review Feedback on Firmaprofesional's CPS
- Detailed BR and EV Review Feedback on Chunghwa Telecom's CPS
- Detailed BR Review Feedback to HARICA on CP/CPS
- Detailed Review Feedback to ISRG/Let's Encrypt on CP/CPS
- Detailed Extended Validation Review Feedback to HARICA on EV aspects of CP/CPS
- Detailed BR and EV Review Feedback to Network Solutions on CPS
- Detailed BR and EV Review Feedback to e-commerce monitoring's (GLOBALTRUST2020) CP/CPS
- Detailed BR and EV Review Feedback to Beijing CA on CPS
- Detailed Extended Validation Review Feedback to NetLock on EV aspects of CP/CPS
- Detailed Review Feedback to TunTrust on CP/CPS
- Detailed Review Feedback to ANF on CP/CPS
- Detailed Review Feedback to Digidentity on CP/CPS
- Detailed Review Feedback to iTrusChina on CPS
- Detailed Review Feedback to NAVER Group on CPS
- Detailed Review Feedback to Chunghwa Telecom on CPS
- Initial Review Feedback to SSLCOM Group on CPS
- Detailed Review Feedback to Identrust on CPS
- Detailed Review Feedback to SecureTrust
- Detailed Review Feedback to Certisign
- Detailed Review Feedback on Microsec
- Detailed Review Feedback on Firmaprofesional
- Detailed Review Feedback on certSIGN CA
- Detailed Review Feedback on Dubai Government CA
- Detailed Review Feedback on Microsoft CA
- Detailed Review Feedback on Entrust CA
- Detailed Review Feedback on Hongkong Post CA
- Detailed Review Feedback on eMudhra CA
- Detailed Review feedback on SHECA
- Detailed Review Feedback on Google Trust Services
- Detailed Review Feedback on GlobalSign
- Review Feedback on WISeKey
- That was after blocking problems with the CP/CPS were resolved.
- Review Feedback on Camerfirma
- CA may submit new root inclusion request for newly generated root that is fully compliant with Mozilla's Root Store Policy and the BRs.
- Review Feedback on TrustCor
- CP and CPS documents clear, well written, and they provided sufficient detail to assess the policies in place.
- Review Feedback on Kamu SM (Government of Turkey)
- CPS document clear and well written
- New requirements for Domain Validation -- all CAs must update their CP/CPS according to section 3.2.2.4 of version 1.4.1 of the BRs.
- Review Feedback on Guangdong Certificate Authority (GDCA)
- Review Feedback on Amazon Trust Services' CP/CPS
- Amazon was commended for the clarity of their CP and CPS.
- Review Feedback on Japan GPKI's CP/CPS
- Japan GPKI's CP/CPS did not contain sufficient detail, so discussion put on hold pending updated CP/CPS.
- A-Trust discussion put on hold pending translation of CP/CPS into English.
- Review Feedback on ComSign's CP/CPS
- ComSign's discussion was put on hold until the CP/CPS is updated to conform to either RFC 2527 or RFC 3647, as required by the Baseline Requirements. And be translated into English.
- Review Feedback on SSC's CP/CPS
- SSC's discussion was put on hold pending updated CP/CPS.
- Review Feedback on ISRG's CP/CPS
- ISRG's CP/CPS had enough detail, and there were only minor corrections/clarifications to be made.
- Review Feedback on DocuSign's CP/CPS
- DocuSign's CP/CPS had enough detail, and there were only minor corrections/clarifications to be made.
- Review Feedback on HARICA's CP/CPS
- HARICA's CP/CPS had enough detail, and there were only minor corrections/clarifications to be made.
- Review Feedback on LuxTrust's CP/CPS
- The concerns raised regarding LuxTrust's CP/CPS resulted in the inclusion request being put on hold until the CP/CPS was updated.
- Review Feedback on Krajowa Izba Rozliczeniowa (KIR) CP/CPS
- KIR updated their CP/CPS according to the review feedback provided in their first discussion
- Then had to update their CP/CPS again due to feedback in their second discussion.