[email protected]

Contact owners and managers

1–30 of 253

Welcome to the dev-security-policy group in which we discuss security-related policies, governance, and related topics; including discussion of Mozilla’s Root Store Policy and the NSS root certificate store.

Mailing List: [email protected]g
Web: https://groups.google.com/a/mozilla.org/g/dev-security-policy
Subscribe by using the button "Ask to join group" and complete the box "Reason for joining". Membership requests must provide context for your interest in joining the group. Requests without this information will be rejected.
Participation Guidelines: https://www.mozilla.org/about/governance/policies/participation/
Participants: https://wiki.mozilla.org/CA/Policy_Participants
Unsubscribe by sending email to: dev-security-policy+unsubscrib[email protected]
Previous archives (2009-2021): https://groups.google.com/g/mozilla.dev.security.policy
RSS feed: https://www.mail-archive.com/d[email protected]/maillist.xml

0 selected

Ben Wilson, … Watson Ladd14

Jun 7

Recent Entrust Compliance Incidents

Dear Bruce, This report is completely unsatisfactory. It starts by presuming that the problem is 4

unread,

Recent Entrust Compliance Incidents

Dear Bruce, This report is completely unsatisfactory. It starts by presuming that the problem is 4

Jun 7

Ben Wilson, Tim Hollebeek2

Jun 5

Help Improve the Mozilla Root Store Policy

This doesn't apply to the parts of Mozilla policy that aren't certificate policy, but to the

unread,

Help Improve the Mozilla Root Store Policy

This doesn't apply to the parts of Mozilla policy that aren't certificate policy, but to the

Jun 5

Jun 5

Phasing out Legacy S/MIME Certificates

All, The Mozilla Root Store Policy incorporates the CA/B Forum's S/MIME Baseline Requirements (

unread,

Phasing out Legacy S/MIME Certificates

All, The Mozilla Root Store Policy incorporates the CA/B Forum's S/MIME Baseline Requirements (

Jun 5

Ben Wilson, … Hao-Chun Li5

Jun 5

Approval of Taiwan CA's Root Inclusion Request

Hi Matt, Our replies are inline below. 2024年6月5日水曜日 8:57:16 UTC+8 Matt Palmer: On Tue, Jun 04, 2024

unread,

Approval of Taiwan CA's Root Inclusion Request

Hi Matt, Our replies are inline below. 2024年6月5日水曜日 8:57:16 UTC+8 Matt Palmer: On Tue, Jun 04, 2024

Jun 5

Wayne, … Yu Rollin8

Jun 1

Mozilla Root Policy: ECC Curves and Signature Length (Mass Certificate Problem Report)

Agreed with Amir, if the public key of the issuer certificate is ECDSA P-384, then the signed

unread,

Mozilla Root Policy: ECC Curves and Signature Length (Mass Certificate Problem Report)

Agreed with Amir, if the public key of the issuer certificate is ECDSA P-384, then the signed

Jun 1

Mike Shaver, … Matt Palmer14

May 30

when do things really need to be revoked? who decides?

On Thu, May 30, 2024 at 02:52:33PM +0000, 'Jeremy Rowley' via [email protected]

unread,

when do things really need to be revoked? who decides?

On Thu, May 30, 2024 at 02:52:33PM +0000, 'Jeremy Rowley' via [email protected]

May 30

Amir Omidi (aaomidi), … Wayne7

May 30

Vulnurability Disclosure - How does it happen?

To bring this discussion back up what is the required impact for disclosure? To move the discussion

unread,

Vulnurability Disclosure - How does it happen?

To bring this discussion back up what is the required impact for disclosure? To move the discussion

May 30

May 22

subscriber certificate agility KYC for CAs

I wanted to elaborate on a piece of my last message, specifically around issuance of certificates for

unread,

subscriber certificate agility KYC for CAs

I wanted to elaborate on a piece of my last message, specifically around issuance of certificates for

May 22

May 22

CA Incident Response and Delayed Revocation Correspondence

Given all of the discussion on delayed revocation the past few months I was thinking it would be

unread,

CA Incident Response and Delayed Revocation Correspondence

Given all of the discussion on delayed revocation the past few months I was thinking it would be

May 22

Ben Wilson, … Amir Omidi (aaomidi)18

May 7

Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

I just wanted to point out that e-commerce's communication is still very-very delayed: https://

unread,

Public Discussion of Acquisition of e-commerce monitoring GmbH by AUSTRIA CARD-Plastikkarten und Ausweissysteme GmbH

I just wanted to point out that e-commerce's communication is still very-very delayed: https://

May 7

Mike Shaver, Ben Wilson2

May 6

comment on Entrust_Issues wiki page

All, I hadn't announced this page yet, hoping to reference it in an email currently undergoing

unread,

comment on Entrust_Issues wiki page

All, I hadn't announced this page yet, hoping to reference it in an email currently undergoing

May 6

Felix Linker, Andrew Ayer3

May 3

CT Log Inclusion check: get-entry-and-proof unexpectedly returns "Not found"

Thanks for the pointer, Andrew! Best, Felix On 3 May 2024, at 00:29, Andrew Ayer <agwa@andrewayer.

unread,

CT Log Inclusion check: get-entry-and-proof unexpectedly returns "Not found"

Thanks for the pointer, Andrew! Best, Felix On 3 May 2024, at 00:29, Andrew Ayer <agwa@andrewayer.

May 3

Mike Shaver, … Andrew Ayer5

May 2

evaluation of aggregate behaviour for CAs

Oh, I feel dumb for not searching the old Google group, considering that I used to subscribe to it.

unread,

evaluation of aggregate behaviour for CAs

Oh, I feel dumb for not searching the old Google group, considering that I used to subscribe to it.

May 2

Wayne, Mike Shaver3

Apr 27

CA Incident Transparency and Public Audits

Thanks, Wayne. I think this sort of analysis is quite valuable for constructing a reliable history of

unread,

CA Incident Transparency and Public Audits

Thanks, Wayne. I think this sort of analysis is quite valuable for constructing a reliable history of

Apr 27

Amir Omidi (aaomidi), … David Adrian4

Apr 22

Question about a random certificate I've found on CT

Thanks all! On Mon, Apr 22, 2024 at 7:05 AM 'David Adrian' via dev-security-policy@mozilla.

unread,

Question about a random certificate I've found on CT

Thanks all! On Mon, Apr 22, 2024 at 7:05 AM 'David Adrian' via dev-security-policy@mozilla.

Apr 22

Mar 25

Approval of Firmaprofesional CA Root-A Web

All, Public discussion regarding inclusion of the Firmaprofesional CA ROOT-A WEB began on the CCADB

unread,

Approval of Firmaprofesional CA Root-A Web

All, Public discussion regarding inclusion of the Firmaprofesional CA ROOT-A WEB began on the CCADB

Mar 25

Kathleen Wilson, … Marcel Levy8

Mar 4

Retirement Announcement & Thank You!

Kathleen, Thank you for your work, and for creating a tool that's helped make the world a bit

unread,

Retirement Announcement & Thank You!

Kathleen, Thank you for your work, and for creating a tool that's helped make the world a bit

Mar 4

Suchan Seo, … Corey Bonnell5

Feb 21

OCSP responde for serial number that exist but out of scope of OCSP reponder?

I agree with Aaron's assessment. In addition to the reasons from a compliance standpoint that

unread,

OCSP responde for serial number that exist but out of scope of OCSP reponder?

I agree with Aaron's assessment. In addition to the reasons from a compliance standpoint that

Feb 21

Kathleen Wilson32

Feb 20

Audit Reminder Email Summary - Intermediate Certificates

-------- Forwarded Message -------- Subject: Summary of February 2024 Outdated Audit Statements for

unread,

Audit Reminder Email Summary - Intermediate Certificates

-------- Forwarded Message -------- Subject: Summary of February 2024 Outdated Audit Statements for

Feb 20

Kathleen Wilson, … Matthias van de Meent39

Feb 20

Audit Reminder Email Summary - Root Certificates

-------- Forwarded Message -------- Subject: Summary of February 2024 Audit Reminder Emails Date: Tue

unread,

Audit Reminder Email Summary - Root Certificates

-------- Forwarded Message -------- Subject: Summary of February 2024 Audit Reminder Emails Date: Tue

Feb 20

Tavis Ormandy, … Corey Bonnell17

Feb 15

BR revocation question

Hi Aaron, > A date no more than 12 months beyond thisUpdate. The acceptable validity intervals do

unread,

BR revocation question

Hi Aaron, > A date no more than 12 months beyond thisUpdate. The acceptable validity intervals do

Feb 15

Hanno Böck, … Tobias S. Josefowitz3

Jan 18

Shared wildcard certificate in EV chargers

On Wed, Jan 17, 2024 at 3:51 PM Xiaohui Lam <[email protected]> wrote: > > This is a

unread,

Shared wildcard certificate in EV chargers

On Wed, Jan 17, 2024 at 3:51 PM Xiaohui Lam <[email protected]> wrote: > > This is a

Jan 18

Peter Mate Erdosi, Corey Bonnell3

Jan 16

Compliance question about OCSP responder certificates

Thank you Corey, I found it! https://cabforum.org/2023/03/17/ballot-sc62v2-certificate-profiles-

unread,

Compliance question about OCSP responder certificates

Thank you Corey, I found it! https://cabforum.org/2023/03/17/ballot-sc62v2-certificate-profiles-

Jan 16

Jan Schaumann, … Matthew Hardeman4

Jan 12

known bad certs blocklist

I also was going to point out that these are probably [at least] three different concepts: 1. There

unread,

known bad certs blocklist

I also was going to point out that these are probably [at least] three different concepts: 1. There

Jan 12

Ben Wilson, … Roman Fischer7

Jan 4

Improvements to Vulnerability Disclosure wiki page

Thanks, Roman I have added "Email Address / Group Distribution List" as a clarification.

unread,

Improvements to Vulnerability Disclosure wiki page

Thanks, Roman I have added "Email Address / Group Distribution List" as a clarification.

Jan 4

Jan 3

Deutsche Telekom Security's Root Inclusion Request

All, Public discussion began on the CCADB Public List on Nov. 1, 2023 (https://groups.google.com/a/

unread,

Deutsche Telekom Security's Root Inclusion Request

All, Public discussion began on the CCADB Public List on Nov. 1, 2023 (https://groups.google.com/a/

Jan 3

Jan 2

S/MIME BR Transition Wiki Page

All, I am editing the S/MIME Baseline Requirements transition guidance wiki page (https://wiki.

unread,

S/MIME BR Transition Wiki Page

All, I am editing the S/MIME Baseline Requirements transition guidance wiki page (https://wiki.

Jan 2

12/19/23

D-Trust Inclusion Request (Email Trust Bit)

All, Public discussion concluded last Friday, Dec. 15, on the CCADB Public List, for D-Trust's

unread,

D-Trust Inclusion Request (Email Trust Bit)

All, Public discussion concluded last Friday, Dec. 15, on the CCADB Public List, for D-Trust's

12/19/23

Amir Omidi (aaomidi)

12/18/23

e-commerce monitoring GmbH and at what point does a CA get distrusted

Hi all, I am hoping to get some root program perspectives on this incident: https://bugzilla.mozilla.

unread,

e-commerce monitoring GmbH and at what point does a CA get distrusted

Hi all, I am hoping to get some root program perspectives on this incident: https://bugzilla.mozilla.

12/18/23

Phil Porada, … Dana Keeler25

12/18/23

Let's Encrypt New Intermediate Certificates

Just a minor nit here, talking about "pinning roots" is a bit of an oxymoron because they

unread,

Let's Encrypt New Intermediate Certificates

Just a minor nit here, talking about "pinning roots" is a bit of an oxymoron because they

12/18/23

Search

Clear search

Close search

Google apps

Main menu