Thank you for your diligence, Eddy!

-Kyle H

On Thu, Mar 26, 2009 at 11:26 AM, Eddy Nigg <eddy_n...@startcom.org> wrote:
> On 03/26/2009 03:53 PM, Eddy Nigg:
>>
>> During the last two weeks I tried to contact the relevant person at the
>> registry for the Israeli Signature Law. Unfortunately I wasn't able to reach
>> anybody neither by email nor phone.
>>
>> Luckily I was however able to have an interesting conversation with Erez
>> Shefler, the auditor of ComSign. He pointed me to the most current "audit
>> criteria", I'll post a copy and short translation of it to the bug later
>> today.
>>
>> I understood from Mr. Shefler that he is currently performing an audit
>> according to ETSI TS 101 456 upon request by ComSign and expects to complete
>> the audit within the next few weeks. Mozilla will receive a copy of the
>> audit report and statement once this is available.
>>
>> Due to the information I received today I recommend to (review the current
>> criteria and) wait for the expected statements from Mr. Shefler which should
>> be compliant to an acceptable audit criteria for Mozilla (ETSI). I recommend
>> after reviewing the new report to perform a second public comments period
>> and schedule their inclusion in case no further issues are raised and the
>> audit and auditor are acceptable to Mozilla.
>>
>
> For your convenience I added the relevant documents to
> https://bugzilla.mozilla.org/show_bug.cgi?id=420705 with this attachment
> being the translated relevant parts:
> https://bugzilla.mozilla.org/attachment.cgi?id=369533
>
> Those docs might be superfluous if according to their auditor ComSign is
> performing now an ETSI audit, they might be relevant if not.
>
> --
> Regards
>
> Signer: Eddy Nigg, StartCom Ltd.
> Jabber: start...@startcom.org
> Blog:   https://blog.startcom.org
>
> --
> dev-tech-crypto mailing list
> dev-tech-crypto@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-tech-crypto
>
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to