future changes to policy

2009-02-14 Thread Ian G
Guys, is there a page in wiki/CA: where we can collect points of discussion for a future review of the policy? The problem being of course that we have long discussions, reach some conclusions, but do not record those conclusions as reminders to change the policy. https://wiki.mozilla.org/C

Re: Certigna Root Inclusion Request

2009-02-14 Thread Frank Hecker
Yannick LEPLARD wrote: Another alternative is to publish just those portions of the CPS that address the question of email verification, and have your auditor confirm to us that the section(s) in question are from the CPS that was referenced in your audit. Frank This is a good alternative f

Re: what is the new work requirement for the auditor?

2009-02-14 Thread Ian G
On 14/2/09 02:15, Eddy Nigg wrote: On 02/13/2009 11:46 AM, Ian G: Don't fixate on the title. CAs generally have some set of documents that are internal / not published, and some set of documents that are published. If someone like the WebTrust people come along and say "CPS must be published" th