3 ms·
Here is where it's documented: https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ https://www.mozilla.org/en-US/about/governa
by CaliforniaKarl 4y ago
Here is where it's documented:
https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ https://www.mozilla.org/en-US/about/governance/policies/secu...
> Mozilla has appointed a CA Certificate module owner and peers to evaluate new CA requests on our behalf and to make decisions regarding all matters relating to CA certificates included in our root store.
https://wiki.mozilla.org/Modules/Activities?#CA_Certificates https://wiki.mozilla.org/Modules/Activities?#CA_Certificates
> Further, Mozilla has appointed a Mozilla CA Certificate Policy module owner and peers to maintain this policy. The policy will only be changed after public consultation with the Mozilla community, in order to ensure that all views are taken into account.
https://wiki.mozilla.org/Modules/Activities#Mozilla_CA_Certificate_Policy https://wiki.mozilla.org/Modules/Activities#Mozilla_CA_Certi...
Ben and Kathleen are either the current module owner, or peer. So there are two people who can have the role, with one making the decision at the time. I imaging there is a process to replace one or both of them, but I'm not really interested in doing the research.
If I do a Google search for "Mozilla CA policy owner", the first result is https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ https://www.mozilla.org/en-US/about/governance/policies/secu...
It would be interesting to know what Google searches you ran, and the results you received.
- kseifried 4y agoThis is the policy owner. Policy execution is different tthan making and owning the policy. Also this means that one person is both responsible for the policy creation and execution. Literally the whole process of "How does one become a root CA for Mozilla/CCADB, and thus all the other browsers" rests on one person. Obligatory XKCD comic goes here.