Confirmed users
377
edits
CA/Responding To An Incident: Difference between revisions
CA/Responding To An Incident (view source)
Revision as of 15:39, 15 February 2023
, 15 February 2023→Incident Report: Added link to CCADB incident report page
(→Keeping Us Informed: Added reference to the CCADB Public list) |
m (→Incident Report: Added link to CCADB incident report page) |
||
| Line 73: | Line 73: | ||
Your CA must submit an incident report by [https://bugzilla.mozilla.org/enter_bug.cgi?product=CA%20Program&component=CA%20Certificate%20Compliance&version=other creating a bug in Bugzilla under the CA Program :: CA Certificate Compliance component]. When the incident is reported only on the CCADB public list or on the [https://groups.google.com/a/mozilla.org/g/dev-security-policy MDSP mailing list], then a bug will be created to track the incident and its resolution in Bugzilla. CAs are encouraged to announce important incidents on public@ccadb.org when they involve the Baseline Requirements, other root programs, or the CCADB; or on the Mozilla dev-security-policy list, when they only involve violations of the Mozilla Root Store Policy. | Your CA must submit an incident report by [https://bugzilla.mozilla.org/enter_bug.cgi?product=CA%20Program&component=CA%20Certificate%20Compliance&version=other creating a bug in Bugzilla under the CA Program :: CA Certificate Compliance component]. When the incident is reported only on the CCADB public list or on the [https://groups.google.com/a/mozilla.org/g/dev-security-policy MDSP mailing list], then a bug will be created to track the incident and its resolution in Bugzilla. CAs are encouraged to announce important incidents on public@ccadb.org when they involve the Baseline Requirements, other root programs, or the CCADB; or on the Mozilla dev-security-policy list, when they only involve violations of the Mozilla Root Store Policy. | ||
For more information on filing an incident report, be sure to read https://www.ccadb.org/cas/incident-report. | |||
The incident report should cover at least the following topics: | The incident report should cover at least the following topics: | ||