← HARICA cases
Bugzilla #2020140
Root Update Request
HARICA: Transition Plan for Existing Dual-Purpose Roots
ASSIGNED
HARICA
AI Summary
This case tracks HARICA's preliminary transition plan for two 2015 Root CAs, which are currently dual-purpose. HARICA aims to comply with the Mozilla Root Store Policy by transitioning to a single trust bit by December 31, 2028. The proposed plan includes distrust dates for TLS and S/MIME, with complete root removal from NSS scheduled for April 15, 2030. Challenges include legacy compatibility issues and the impact of Chrome's planned clientAuth EKU removal.
Chronology
- HARICA 2015 Root key generation.
- HARICA 2015 Roots added to NSS.
- Migration of most TLS and S/MIME issuance to dedicated 2021 hierarchies.
- Websites (TLS) distrust_after_date.
- S/MIME distrust_after_date.
- Removal of HARICA 2015 Roots from NSS.
Participants
Ben Wilson
External References
Similar Local Cases
SECOM: Transition Plan for Existing Dual-Purpose Roots
OISTE: Transition Plan for Existing Dual-Purpose Root
FNMT-RCM: Transition Plan for Existing Roots
eMudhra: Transition Plan for Existing Dual-Purpose Roots
KIR SA: Transition Plan for Existing Dual-Purpose Roots
Telia: Transition Plan for Existing Dual-Purpose Roots
Identrust: Transition Plan for Existing Dual-Purpose Roots
Telekom Security: Transition Plan for Existing Dual-Purpose Roots