Groups

dev-security-policy@mozilla.org

1–30 of 342

Welcome to the dev-security-policy group in which we discuss issues concerning the Mozilla Root Program, root store policy development, governance matters, and other PKI topics directly relevant to the Program.

Mailing List: dev-security-policy@mozilla.org
Web: https://groups.google.com/a/mozilla.org/g/dev-security-policy
Subscribe by using the button "Ask to join group" and complete the box "Reason for Joining" because MEMBERSHIP REQUESTS MUST PROVIDE CONTEXT FOR INTEREST IN JOINING THE GROUP. REQUESTS WITHOUT THIS INFORMATION WILL BE REJECTED.
Participation Guidelines: https://www.mozilla.org/about/governance/policies/participation/
Participants: https://wiki.mozilla.org/CA/Policy_Participants
Unsubscribe by sending email to: dev-security-policy+unsubscribe@mozilla.org
Previous list archives (2009-2021): https://groups.google.com/g/mozilla.dev.security.policy

0 selected

Arabella Barks, … Tobias S. Josefowitz4

Nov 24

Subject: Confusion/questions regarding SC-088v3

Hi Arabella, On Sat, 22 Nov 2025, Arabella Barks wrote: > I have someting confusion regarding SC-

unread,

Subject: Confusion/questions regarding SC-088v3

Hi Arabella, On Sat, 22 Nov 2025, Arabella Barks wrote: > I have someting confusion regarding SC-

Nov 24

Nov 23

Updated Value Statement Wiki Guidance

All, Based on a recent review of some of the Value Statements submitted by CA operator applicants, I

unread,

Updated Value Statement Wiki Guidance

All, Based on a recent review of some of the Value Statements submitted by CA operator applicants, I

Nov 23

Nov 18

New CA Wiki Page: Summary of Root Inclusion Process and Evaluation Criteria

All, I have created a summary of the root inclusion process, with pointers to the wiki and other

unread,

New CA Wiki Page: Summary of Root Inclusion Process and Evaluation Criteria

All, I have created a summary of the root inclusion process, with pointers to the wiki and other

Nov 18

Jin Tong, … Henry Birge-Lee4

Nov 11

The impact of MitM attack

Hello Henry, Thank you very much for your patience in clarifying this matter. We appreciate your

unread,

The impact of MitM attack

Hello Henry, Thank you very much for your patience in clarifying this matter. We appreciate your

Nov 11

Dale Newton, … Ronald Crane4

Nov 10

No master password on Android

Please use https://bugzilla.mozilla.org to discuss bugs in, and enhancement requests for, Firefox. On

unread,

No master password on Android

Please use https://bugzilla.mozilla.org to discuss bugs in, and enhancement requests for, Firefox. On

Nov 10

Nov 5

Notification of acquisition of VikingCloud’s Digital Certificate Business

All, SSL.com and VikingCloud are disclosing details for the technical community in this forum,

unread,

Notification of acquisition of VikingCloud’s Digital Certificate Business

All, SSL.com and VikingCloud are disclosing details for the technical community in this forum,

Nov 5

Ben Wilson, … Ronald Crane4

Oct 27

New Lists of Mozilla Root CAs

On 10/27/2025 12:12 PM, 'Jan Schaumann' via dev-secur...@mozilla.org wrote: "

unread,

New Lists of Mozilla Root CAs

On 10/27/2025 12:12 PM, 'Jan Schaumann' via dev-secur...@mozilla.org wrote: "

Oct 27

Oct 22

Updated Mozilla CT Log Policy

All, We recently updated our Certificate Transparency policy documentation to clarify our CT Log

unread,

Updated Mozilla CT Log Policy

All, We recently updated our Certificate Transparency policy documentation to clarify our CT Log

Oct 22

Oct 16

Thoughts on Advancing ARI Adoption and Its Implementation in ACME Clients

Hello all, This is Arabella. Today, while reviewing various ACME clients, I observed that several

unread,

Thoughts on Advancing ARI Adoption and Its Implementation in ACME Clients

Hello all, This is Arabella. Today, while reviewing various ACME clients, I observed that several

Oct 16

Lambert Evans, … Matt Palmer28

Oct 14

SHECA:TLS certificate key generation online

On Tue, Oct 14, 2025 at 05:19:30AM -0700, Alvin Wang wrote: > Thank you very much for your

unread,

SHECA:TLS certificate key generation online

On Tue, Oct 14, 2025 at 05:19:30AM -0700, Alvin Wang wrote: > Thank you very much for your

Oct 14

Oct 2

Updated Root and Intermediate CA Reports on Mozilla CA Wiki

All, The following wiki pages have been updated with links to a new version of some of the CCADB-

unread,

Updated Root and Intermediate CA Reports on Mozilla CA Wiki

All, The following wiki pages have been updated with links to a new version of some of the CCADB-

Oct 2

Sep 17

Notification of GlobalSign providing reselling services to Chunghwa Telecom

Dear all The purpose of this e-mail is to notify you of GlobalSign's intent to provide reselling

unread,

Notification of GlobalSign providing reselling services to Chunghwa Telecom

Dear all The purpose of this e-mail is to notify you of GlobalSign's intent to provide reselling

Sep 17

Sep 11

Updated Approval Process for Externally Operated Subordinate CAs

All, I have updated the process description for approval of externally operated subordinate CAs (

unread,

Updated Approval Process for Externally Operated Subordinate CAs

All, I have updated the process description for approval of externally operated subordinate CAs (

Sep 11

Youfu Zhang, … Wayne7

Sep 4

Incident Report: Mis-issued Certificates for SAN iPAddress:1.1.1.1 by Fina RDC 2020

A glance through censys with the following query and a report checking parsed.extensions.

unread,

Incident Report: Mis-issued Certificates for SAN iPAddress:1.1.1.1 by Fina RDC 2020

A glance through censys with the following query and a report checking parsed.extensions.

Sep 4

Aug 22

Approval of OISTE Root CA Certificate Request

All, The Mozilla root inclusion process is outlined here: https://wiki.mozilla.org/CA/

unread,

Approval of OISTE Root CA Certificate Request

All, The Mozilla root inclusion process is outlined here: https://wiki.mozilla.org/CA/

Aug 22

Ivan, Ben Wilson4

Aug 8

Inquiry on "Acceptable" CA criteria, after remove of non-discrimination clause

Just realized that I've sent a previous message using a Google Groups web form, and it's most

unread,

Inquiry on "Acceptable" CA criteria, after remove of non-discrimination clause

Just realized that I've sent a previous message using a Google Groups web form, and it's most

Aug 8

Jul 23

Preview of Let's Encrypt's upcoming Root Ceremony

Hi Sándor, Good question! The first interpretation is correct. The authorityKeyIdentifier extension

unread,

Preview of Let's Encrypt's upcoming Root Ceremony

Hi Sándor, Good question! The first interpretation is correct. The authorityKeyIdentifier extension

Jul 23

Jul 14

Fwd: [Smcwg-public] Deprecation of Legacy

Forwarding for additional visibility and notice to SMIME-issuing CAs. ---------- Forwarded message --

unread,

Fwd: [Smcwg-public] Deprecation of Legacy

Forwarding for additional visibility and notice to SMIME-issuing CAs. ---------- Forwarded message --

Jul 14

Hanno Böck, … John Schanck4

Jun 20

Limitations of aggreated CRL revocation checks

Right, Mozilla root store policy [1] requires CAs to disclose their CRLs in CCADB. Mozilla's

unread,

Limitations of aggreated CRL revocation checks

Right, Mozilla root store policy [1] requires CAs to disclose their CRLs in CCADB. Mozilla's

Jun 20

Ben Wilson, … Jeremy Rowley64

Jun 18

Results of 2025 Roundtable Discussion

Sounds good. The 50k number sounds about right based on those bugs too. Most CPS errors do not

unread,

Results of 2025 Roundtable Discussion

Sounds good. The 50k number sounds about right based on those bugs too. Most CPS errors do not

Jun 18

Dana Keeler, … Pierre Barre10

Jun 18

Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135

Hello, I am quite late to the party on this thread, but having recently implemented a CT log (https:/

unread,

Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135

Hello, I am quite late to the party on this thread, but having recently implemented a CT log (https:/

Jun 18

Jun 17

Approval of SwissSign's Root Inclusion Requests

All, The Mozilla root inclusion process is outlined here: https://wiki.mozilla.org/CA/

unread,

Approval of SwissSign's Root Inclusion Requests

All, The Mozilla root inclusion process is outlined here: https://wiki.mozilla.org/CA/

Jun 17

Amir Omidi, … Watson Ladd6

Jun 15

Email I've received regarding Digicert

Dear Digicert and other dev sec policy people, I think this email and the response raises a lot of

unread,

Email I've received regarding Digicert

Dear Digicert and other dev sec policy people, I think this email and the response raises a lot of

Jun 15

Matt Palmer, … Mike Shaver13

Jun 10

Mitigations needed for legal action imposing delayed revocation

On Tue, Jun 10, 2025 at 08:38:44AM -0400, Mike Shaver wrote: > (In the history of distrust events,

unread,

Mitigations needed for legal action imposing delayed revocation

On Tue, Jun 10, 2025 at 08:38:44AM -0400, Mike Shaver wrote: > (In the history of distrust events,

Jun 10

Ben Wilson, Arabella Barks3

Jun 6

Approval of TrustAsia's root inclusion request

Thanks for letting me know. I think it was a clip-and-paste error. Here are the correct links:

unread,

Approval of TrustAsia's root inclusion request

Thanks for letting me know. I think it was a clip-and-paste error. Here are the correct links:

Jun 6

Hanno Böck, … Suchan Seo4

May 18

Unusual / unparseable internediate certificate in CT log (cPanel)

https://github.com/golang/go/commit/51ff3a6965b3fc40aceebe90eaf15a8a1a00a452 looks like it fixed in

unread,

Unusual / unparseable internediate certificate in CT log (cPanel)

https://github.com/golang/go/commit/51ff3a6965b3fc40aceebe90eaf15a8a1a00a452 looks like it fixed in

May 18

Xiaohui Lam, … Matt Palmer16

May 16

Extended discuss of ACME DNS Labeled With ACME Account ID Challenge

Hi Matt, Thanks for your participation in the discussion. I think rare is just my personal habit of

unread,

Extended discuss of ACME DNS Labeled With ACME Account ID Challenge

Hi Matt, Thanks for your participation in the discussion. I think rare is just my personal habit of

May 16

Aaron Gable, Corey Bonnell2

May 15

New Bugzilla Report regarding issuance for Internationalized Domain Names

Hi Aaron, Thanks for raising this. Regarding the callout on P-labels in the bug: > By these

unread,

New Bugzilla Report regarding issuance for Internationalized Domain Names

Hi Aaron, Thanks for raising this. Regarding the callout on P-labels in the bug: > By these

May 15

May 12

Draft Agenda for Roundtable Discussion

Here is a draft agenda: Mozilla Root Program Roundtable – Draft Agenda (90 minutes) Welcome and

unread,

Draft Agenda for Roundtable Discussion

Here is a draft agenda: Mozilla Root Program Roundtable – Draft Agenda (90 minutes) Welcome and

May 12

Ben Wilson, … Mike Shaver10

May 12

Mozilla CA Program Roundtable Discussion

All, Listed below are some of the survey results and the top-scoring topics for Friday's

unread,

Mozilla CA Program Roundtable Discussion

All, Listed below are some of the survey results and the top-scoring topics for Friday's

May 12