<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Bonjour Ryan,<br>
<br>
Le 23/09/2014 19:04, Ryan Sleevi a écrit :<br>
</div>
<blockquote
cite="mid:CACvaWvaQgbR-Jx_1oFVjV4bggxA3W9J-W1hkweRw_L+XWNheJg@mail.gmail.com"
type="cite">Isn't there two aspects at play here? The first is the
CRL for the technically constrained subCA. Since that subCA has to
be disclosed to Moz (as part of the Moz program + Audit
requirements), revoking that subCA 'should' also be a public act
and uncontroversially so.</blockquote>
<br>
Extract from Mozilla inclusion policy:<br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<span style="color: rgb(51, 51, 51); font-family: 'Open Sans',
X-LocaleSpecific, sans-serif; font-size: 14px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing: normal;
line-height: 21px; orphans: auto; text-align: left; text-indent:
0px; text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline
!important; float: none; background-color: rgb(245, 241, 232);">All
certificates that are capable of being used to issue new
certificates, and which directly or transitively chain to a
certificate included in Mozilla’s CA Certificate Program, MUST be
operated in accordance with<span class="Apple-converted-space"> </span></span><a
href="https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/"
style="margin: 0px; padding: 0px; border: 0px; color: rgb(0, 150,
221); text-decoration-line: none; font-family: 'Open Sans',
X-LocaleSpecific, sans-serif; font-size: 14px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing: normal;
line-height: 21px; orphans: auto; text-align: left; text-indent:
0px; text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(245, 241, 232);">Mozilla’s CA Certificate
Policy</a><span style="color: rgb(51, 51, 51); font-family: 'Open
Sans', X-LocaleSpecific, sans-serif; font-size: 14px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 21px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none; background-color:
rgb(245, 241, 232);"><span class="Apple-converted-space"> </span>and
MUST either be<span class="Apple-converted-space"> </span></span><b
style="margin: 0px; padding: 0px; border: 0px; color: rgb(51, 51,
51); font-family: 'Open Sans', X-LocaleSpecific, sans-serif;
font-size: 14px; font-style: normal; font-variant: normal;
letter-spacing: normal; line-height: 21px; orphans: auto;
text-align: left; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(245, 241,
232);">technically constrained</b><span style="color: rgb(51, 51,
51); font-family: 'Open Sans', X-LocaleSpecific, sans-serif;
font-size: 14px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height: 21px;
orphans: auto; text-align: left; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important; float:
none; background-color: rgb(245, 241, 232);"><span
class="Apple-converted-space"> </span>or be<span
class="Apple-converted-space"> </span></span><b style="margin:
0px; padding: 0px; border: 0px; color: rgb(51, 51, 51);
font-family: 'Open Sans', X-LocaleSpecific, sans-serif; font-size:
14px; font-style: normal; font-variant: normal; letter-spacing:
normal; line-height: 21px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(245, 241, 232);">publicly disclosed and
audited.</b><br>
Pretty clear.<br>
<br>
<br>
CABForum BR only requires a regular quality assessment for
technically constrained subordinate CAs, performed by the issuing
CA. No disclosure of the CA is required.<br>
<br>
</body>
</html>