Can you please create a new HG repository, at projects/ca-certificates Can you please set commit privileges to the same group of users who currently can commit to the existing projects/nss repository? Thanks in advance for your help Reason: As of today, the CA Certificates and trust settings are part of the NSS project. We'd like to have them separate, so the CAs can be releases with a different schedule, and to allow Firefox and others to more easily combine arbitrary releases of NSS and CAs. This has already been discussed with the NSS team, and I'd like to proceed with implementing it.
Kai: You filed this bug as a request, indicating it blocks Bug 1294150, but I'm not aware of any public discussion around this. Further, the Bug 1294150 suggests its being considered, while here, you suggest it's fait accompli. Would you be able to hold on this bug until sufficient discussion has happened?
This plan had be discussed in a past NSS conference call. There was agreement from several people in that call, including from Bob Relyea. It's only now that I'm able to work on it, also triggered by the need to delay the removal of several CAs until the beginning of 2017.
Then might I suggest we take it to the list? Either mozilla.dev.security.crypto (ideally) or nss-dev? As I've got a conflict, I haven't been able to make the past several calls. I'm suggesting there are concrete, unresolved problems with your plan, and it causes quantifiable harm to the ecosystem. We should discuss more, publicly, about that plan.
I'm moving this bug to the UNCONFIRMED state, until we have a decision about what to do. Please postpone this work.
Status: NEW → UNCONFIRMED
Ever confirmed: false
Please reopen if/when this is actionable.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.