Here's the audit: https://bugzilla.mozilla.org/show_bug.cgi?id=1628720#c14 https://bugzilla.mozilla.org/show_bug.cgi?id=1628720#c14 The requirements they are s

Here's the audit: https://bugzilla.mozilla.org/show_bug.cgi?id=1628720#c14 https://bugzilla.mozilla.org/show_bug.cgi?id=1628720#c14 The requirements they are supposed to check against: https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.6.7.pdf https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-... - section 5 addresses security, referencing "The CA/Browser Forum’s Network and Certificate System Security Requirements" - https://cabforum.org/network-security-requirements/ https://cabforum.org/network-security-requirements/, which at least in the version 1.3 that I saw required pentests and security scans.