mozilla / www.ccadb.org

Website about the Mozilla-run Common CA Database
9 stars 12 forks source link

Future Policy Update: Provide Address for Audit Delay Explanatory Letter #102

Open ryancdickson opened 1 year ago

ryancdickson commented 1 year ago

Section 5.1 (Audit Statement Content) states:

An authoritative English language version of publicly available audit information must be uploaded to the CCADB no later than three months after the end of the audit period. In the event of a delay greater than three months, the CA Owner must provide an explanatory letter signed by the Qualified Auditor.

However, does not specify where the explanatory letter must be sent.

In a future update to the CCADB policy, require these letters to be:

  1. mailed to support@ccadb.org, or
  2. posted to Bugzilla.
BenWilson-Mozilla commented 1 year ago

What about specifying 90 - 9x days instead of three months and then aligning that calculation with the CCADB?

ryancdickson commented 1 year ago

Converting the period to days sounds good to me.

rajuTK9 commented 1 year ago

Hey, can I take up this issue and try to fix it?

I am a little confused about what to do with the provided information. Can I get some more context on it? And can I take this forward?