Eddy Nigg (StartCom Ltd.) wrote: > I'd like to make some of you aware of the latest entry by Rick from > Verisign of the bug 402947. Rick writes, that their EV audit is under > way...meaning that Verisign hasn't finished the process of the first > audit yet. This might give us an indication about why some/many of the > potential issuers of EV certificates haven't yet requested to have their > root(s) marked as such since auditing is still under way.
Yes. Just to be clear on this: Since we now have a formal policy relating to EV, and the policy requires completion of an EV audit per the guidelines, I will not be approving any CA requests for permanent upgrades to EV status until/unless the CAs in question finish their audits and publish the accompanying auditor letters. However in the meantime as I previously noted I will approve requests from the NSS team for temporary EV upgrades and related changes in order to do testing of the NSS EV code (e.g., for Firefox 3 beta). Such approval does not constitute approval for permanent upgrades, which will be handled per policy as discussed above. Frank -- Frank Hecker [EMAIL PROTECTED] _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
