Re: Mozilla CA Management Tool

2008-05-02 Thread Eddy Nigg (StartCom Ltd.)
Eddy Nigg (StartCom Ltd.): Another consideration I want to through into this discussion Should have been throw I promise to proofread my messages better in the future ;-) -- Regards Signer: Eddy Nigg, StartCom Ltd. Jabber: [EMAIL PROTECTED] Bl

Re: Mozilla CA Management Tool

2008-05-01 Thread Eddy Nigg (StartCom Ltd.)
Another consideration I want to through into this discussion is to have a potential change to the Mozilla CA policy concerning yearly re-auditing requirement. Re-auditing on a yearly or by-yearly basis has been brought up a few times at various occasions. One of the arguments against this requi

Re: Mozilla CA Management Tool

2008-04-27 Thread Eddy Nigg (StartCom Ltd.)
Kyle Hamilton: Erm, I must ask this. Are you proposing to manage Mozilla's CA approval process as though it were a CA itself? No, not at all. I'm talking about a management utility in order to make our life's easier, simply as that, nothing more than that. Governing EV should be more or l

Re: Mozilla CA Management Tool

2008-04-27 Thread Kyle Hamilton
Erm, I must ask this. Are you proposing to manage Mozilla's CA approval process as though it were a CA itself? I believe the entire concept of "Mozilla running a CA" has been soundly rejected, time and time again. Granted, the things that it does -- managing the audits, the approvals, and whatno

Re: Mozilla CA Management Tool

2008-04-27 Thread Eddy Nigg (StartCom Ltd.)
Hi Nelson, Nelson B Bolyard: I submit that we already have a very powerful tool for this purpose. It is the bugzilla.mozilla.org (b.m.o) bug tracking system. It has powerful searching. It presents reports in readable and user-customizable tables (although I gather that few know how to customize

Re: Mozilla CA Management Tool

2008-04-27 Thread Nelson B Bolyard
Eddy Nigg (StartCom Ltd.) wrote, On 2008-04-27 11:14: > Basically I'd first of all automate much tracking and other manual work > (such as statuses of CAs (and generation of their pages), auditing, > reporting etc) so what we have a reliable tool for that. Besides that we > could harbor important

Re: Mozilla CA Management Tool

2008-04-27 Thread Eddy Nigg (StartCom Ltd.)
Kyle Hamilton: Why would you not accept a virtually-hosted system? The benefits of virtual machines (including "if the hardware goes down, the VM can be brought up again with a minimum of fuss") are many and varied, especially for an organization like Mozilla -- while the risks of having a phys

Re: Mozilla CA Management Tool

2008-04-27 Thread Kyle Hamilton
2008/4/27 Eddy Nigg (StartCom Ltd.) <[EMAIL PROTECTED]>: > > In respect of that, I'd suggest a dedicated system (server) which would > have strict access controls in every respect (including the management > utility). I could offer to build and host such a system at a well secured > locality for a

Re: Mozilla CA Management Tool

2008-04-27 Thread Eddy Nigg (StartCom Ltd.)
Frank Hecker: I'd be interested in your thoughts about what such a tool should do. We've been evolving over the years in terms of what and how much information we keep about CAs, and certainly the system we have now is far from perfect. Basically I'd first of all automate much tracking a

Re: Mozilla CA Management Tool

2008-04-27 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > It seems to me that Mozilla needs a decent tool in order to manage CAs, > their inclusion, approval, removal processes. > I might make suggestions (on how this tool should look) and even offer > to provide such a tool (with everything what it entails, including