[Bug 1271513]

[Consultingwebtrust]

(In reply to Kathleen Wilson from comment #135)
> (In reply to Antonio from comment #134)
> > Indeed, new version of CPS and PC that are within the scope of the
> > certification will comply with the requirement of the “WebTrust SM/TM for
> > Certification Authorities WebTrust Principles and Criteria for Certification
> > Authorities - SSL Baseline with Network Security”. However, for the sake of
> > coherence, it was not possible to consider such statement but after
> > finishing the audit. 
> > 
> > It will be included the following text:
> > 
> > FNMT-RCM conforms to the current version of the Baseline Requirements for
> > the Issuance and Management of Publicly-Trusted Certificates published at
> > https://cabforum.org/wp-content/uploads/BRv1.2.3.pdf. In the event of any
> > inconsistency between this document and those Requirements, those
> > Requirements take precedence over this document. 
> > 
> > We remain at your disposal for any further clarification concerning this
> > topic.
> 
> 
> Please clarify if you intend to add that statement to the CP/CPS, or if you
> are saying it will be part of the audit statement only.
> 
> For reference, I asked in the discussion forum about having the BR
> commitment to comply in the audit statement only:
> https://groups.google.com/d/msg/mozilla.dev.security.policy/wsw2G-PFKiA/
> akU0bhzN8MMJ
> It looks to me like the answer will be that it needs to be in the CP/CPS.
> You are welcome to participate in that discussion.

Dear Kathleen,

The following statement will be added in the next version of the CP/CPS:

"The FNMT-RCM manages its certification services and issues certificates
in accordance with the “Baseline Requirements for the Issuance and
Management of Publicly-Trusted Certificates” established by the
CA/Browser Forum and which can be consulted in the following link:
https://cabforum.org/baseline-requirements-documents/

The FNMT-RCM shall review its certification policies and practises in
order to keep them in line with the referred requirements. In light of
the publication of new versions of that document of requirements, The
FNMT-RCM shall act diligently to address any deviation or, where
appropriate, notify in this document any incurred noncompliance."

Best regards.

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/1271513

Title:
  www.cert.fnmt.es certificates are not included in Mozilla products

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1271513/+subscriptions