Policy-Discussion

["Ian G (Audit)" <iang AT cacert.org>]

On 10/2/09 16:37, Ian G (Audit) wrote:

> Then, when that goes through, there is ample opportunity to upgrade:
>
> 1. there is a 40 week delay from application to evaluation.
> 2. IIRC, there are some months before the next root list goes out.
> 3. during that entire time, the application can be upgraded.
> 4. Once the CA has got past the audit hurdle, the standard is set.
> 5. The CA adds its subroot for OA independent of Mozilla [1].
> 6. There is no *additional* delay by leaving it out, as long as
> you meet the standard set, it can be instantly effective.


On this point, there is a discussion now going on over at Mozilla where 
any upgrades will have to be covered by Audit.  So that may need to be 
factored into the above, if a "ruling" comes down on this issue from the 
Mozilla process.

iang

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature