Re: Some more CA infrastructure questions

2007-12-04 Thread Gervase Markham
C.J. Adams-Collier wrote: > Organization contact information; certificate of authenticity; certifying > body; name, birth date, governmental ID, blood type, gender of all > personnel; you know... the usual :) We have some of this - see the list. http://www.mozilla.org/projects/security/certs/pendi

Re: Some more CA infrastructure questions

2007-12-02 Thread C.J. Adams-Collier
On Nov 30, 2007 11:45 AM, Gervase Markham <[EMAIL PROTECTED]> wrote: > C.J. Adams-Collier wrote: > > * Date of last audit > > For CAs approved under the new regime, this information is tracked > informally as text in their approval notice, plus also you can click > through to their WebTrust etc. s

Re: Some more CA infrastructure questions

2007-11-30 Thread Gervase Markham
C.J. Adams-Collier wrote: > * Date of last audit For CAs approved under the new regime, this information is tracked informally as text in their approval notice, plus also you can click through to their WebTrust etc. statement to see. > * Auditor profile What is that, exactly? > * Canonical do

Re: Some more CA infrastructure questions

2007-11-28 Thread Eddy Nigg (StartCom Ltd.)
To all of my knowledge most questions can be answered with no. Except I guess complaints will be take in any form, including this mailing list. C.J. Adams-Collier wrote: > Hey folks, > > Do we keep track of CA metadata such as: > > * Date of last audit > * Auditor profile > * Canonical domain > *

Some more CA infrastructure questions

2007-11-28 Thread C.J. Adams-Collier
Hey folks, Do we keep track of CA metadata such as: * Date of last audit * Auditor profile * Canonical domain * URL of CRL Does the Mozilla Foundation do heartbeat checks on all CAs at regular intervals? Is there any infrastructure in place to remove non-responsive CAs or CAs which fail audits?