Disig root inclusion request for Mozilla trust bits

This case was Disig, a.s.'s request to add the CA Disig root certificate to Mozilla and enable trust bits for websites, email, and code signing. The request was opened by Disig in 2008 and went through Mozilla's information-gathering and public discussion process. Mozilla asked for details on the certificate hierarchy, validation practices, public availability of policy documents, and independent verification of audit statements. Disig provided policy and audit information, updated its public CP/CPS to address validation concerns, and supplied an English version of the CP. Mozilla then opened a second public discussion, concluded that the request met the policy requirements, and approved inclusion of the root with the requested trust bits. The bug was resolved FIXED, and Mozilla filed a separate NSS bug to make the actual changes.

1. 2008-09-18 Disig requested inclusion of the CA Disig root certificate in Mozilla.
2. 2009-07-13 Mozilla opened the first public discussion for the root inclusion request.
3. 2009-12-17 Mozilla opened the second public discussion after updated CP/CPS and audit information were provided.
4. 2010-01-12 Mozilla approved inclusion of the CA Disig root certificate with websites, email, and code signing trust bits.

1. 2008-09-18 Disig, a.s. — Opened the bug and provided the CA Disig root certificate and supporting information.
2. 2008-10-30 Mozilla representative — Requested hierarchy, validation, problematic-practices, and audit information for the root.
3. 2008-11-20 Disig, a.s. — Explained domain and email verification practices and provided a test website URL.
4. 2008-11-25 Disig, a.s. — Said the relevant validation text had been added to the public CP document.
5. 2009-07-29 Mozilla representative — Summarized first-round discussion concerns and listed action items for Disig.
6. 2009-12-02 Disig, a.s. — Provided an audit report and stated the CPS was publicly available.
7. 2009-12-04 Mozilla representative — Asked for independent verification details for the audit statement.
8. 2009-12-07 Disig, a.s. — Provided auditor contact information and described the audit team.
9. 2009-12-17 Mozilla representative — Opened the second public discussion for the inclusion request.
10. 2010-01-08 Mozilla representative — Summarized the assessment and said she was inclined to approve the request.
11. 2010-01-12 Mozilla representative — Approved the request and said an NSS bug would be filed for the actual changes.