(In reply to Kathleen Wilson from comment #135) > (In reply to Antonio from comment #134) > > Indeed, new version of CPS and PC that are within the scope of the > > certification will comply with the requirement of the “WebTrust SM/TM for > > Certification Authorities WebTrust Principles and Criteria for Certification > > Authorities - SSL Baseline with Network Security”. However, for the sake of > > coherence, it was not possible to consider such statement but after > > finishing the audit. > > > > It will be included the following text: > > > > FNMT-RCM conforms to the current version of the Baseline Requirements for > > the Issuance and Management of Publicly-Trusted Certificates published at > > https://cabforum.org/wp-content/uploads/BRv1.2.3.pdf. In the event of any > > inconsistency between this document and those Requirements, those > > Requirements take precedence over this document. > > > > We remain at your disposal for any further clarification concerning this > > topic. > > > Please clarify if you intend to add that statement to the CP/CPS, or if you > are saying it will be part of the audit statement only. > > For reference, I asked in the discussion forum about having the BR > commitment to comply in the audit statement only: > https://groups.google.com/d/msg/mozilla.dev.security.policy/wsw2G-PFKiA/ > akU0bhzN8MMJ > It looks to me like the answer will be that it needs to be in the CP/CPS. > You are welcome to participate in that discussion.
Dear Kathleen, The following statement will be added in the next version of the CP/CPS: "The FNMT-RCM manages its certification services and issues certificates in accordance with the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” established by the CA/Browser Forum and which can be consulted in the following link: https://cabforum.org/baseline-requirements-documents/ The FNMT-RCM shall review its certification policies and practises in order to keep them in line with the referred requirements. In light of the publication of new versions of that document of requirements, The FNMT-RCM shall act diligently to address any deviation or, where appropriate, notify in this document any incurred noncompliance." Best regards. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1271513 Title: www.cert.fnmt.es certificates are not included in Mozilla products To manage notifications about this bug go to: https://bugs.launchpad.net/firefox/+bug/1271513/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
