{% trans group=url('mozorg.about.governance.policies.security.group') %} - The Mozilla security module owner and peers will form the core of the Mozilla security bug group, and will select a number of other people to round out the group’s membership. Each and every member of the Mozilla security bug group will automatically have access to all Mozilla bugs marked “Security-Sensitive.” The members of the Mozilla security bug group will be drawn primarily from the following groups: +
{% trans %} + The Mozilla security module owner and peers will form the core of the Mozilla security bug group, and will select a number of other people to round out the group’s membership. Each and every member of the Mozilla security bug group will automatically have access to all Mozilla bugs marked “Security-Sensitive.” The members of the Mozilla security bug group will be drawn primarily from the following groups: {% endtrans %}
{{ _('Mozilla will take any steps we deem appropriate to protect our users if we learn that a CA has knowingly or intentionally mis-issued one or more certificates. This may include, but is not limited to disablement (partially or fully) or removal of all of the CA’s certificates from Mozilla’s products. A certificate that includes domain names that have not been verified according to the CA/Browser Forum’s Baseline Requirement #11.1.1 is considered to be mis-issued. A certificate that is intended to be used only as an end entity certificate but includes a keyUsage extension with values keyCertSign and/or cRLSign or a basicConstraints extension with the cA field set to true is considered to be mis-issued.')|format('https://www.cabforum.org/documents.html') }}
{{ _('A certificate is disabled by turning off one or more of the three trust bits (Websites, Email, Code Signing). +
{{ _('A certificate is disabled by turning off one or more of the three trust bits (Websites, Email, Code Signing). Disablement or removal of a certificate may be initiated by submitting a bug report to the mozilla.org Bugzilla system, as described in the Root Change Process or the Mozilla Policy for Handling Security Bugs.')|format('https://wiki.mozilla.org/CA:Root_Change_Process', url('mozorg.about.governance.policies.security.certs.policy')) }}
{{ _('View the list of CA certificates that are currently distributed with Mozilla software products.')|format(url('mozorg.about.governance.policies.security.certs.included')) }}
diff --git a/bedrock/mozorg/templates/mozorg/about/governance/policies/security/certs/policy.html b/bedrock/mozorg/templates/mozorg/about/governance/policies/security/certs/policy.html index ce93b1a88b..04bcb359eb 100644 --- a/bedrock/mozorg/templates/mozorg/about/governance/policies/security/certs/policy.html +++ b/bedrock/mozorg/templates/mozorg/about/governance/policies/security/certs/policy.html @@ -3,13 +3,11 @@ # file, You can obtain one at http://mozilla.org/MPL/2.0/. -#} {% extends "mozorg/about-base.html" %} - + {% block page_title %}{{ _('Mozilla CA Certificate Policy') }}{% endblock %} {% block body_class %}sand{% endblock %} -{% block extrahead %} - {{ css('security-group') }} -{% endblock %} +{% block extrahead %}{% endblock %} {% block article %}{{ _('This section describes the obligations of Certification Authorities applying for inclusion of their root certificates in Mozilla Products. This includes considerations that are taken into account such as the CA’s publicly available documentation about their policies, and audits of the CA’s operations in support of the documented policies.') }}
{{ _('This section describes the obligations of Certification Authorities for maintaining confidence in their root certificates that are included in Mozilla Products. This includes regular auditing of the CA’s policies and practices; conforming to current CA industry standards and recommended best practices; and making changes to included root certificates.') }}
-{{ _('This section describes the steps that Mozilla may take in order to enforce this policy. This includes evaluation of security concerns, and removing or disabling a root certificate.') }}
{% trans mail='mailto:security@mozilla.org?subject=Mozilla%20security%20bug%20report' %} - IMPORTANT: Anyone who believes they have found a Mozilla-related security vulnerability can and should report -it by sending email to the address security@mozilla.org. - {% endtrans %}
- - - -{% trans group=url('mozorg.about.governance.policies.security.group') %} - Membership of each group is decided by the current membership of the Security Group. The list of members is available here. The Security Group moderator may, at his discretion, move inactive members to an “Alumni” list. This would involve removing them from the mailing list and/or removing their bug access, as appropriate. They can be reactivated by him at their request. This is to keep the size of the group to the minimum necessary, for information security reasons. +
{% trans %} + Membership of each group is decided by the current membership of the Security Group. The Security Group moderator may, at his discretion, move inactive members to an “Alumni” list. This would involve removing them from the mailing list and/or removing their bug access, as appropriate. They can be reactivated by him at their request. This is to keep the size of the group to the minimum necessary, for information security reasons. {% endtrans %}
{% trans %} diff --git a/bedrock/mozorg/urls.py b/bedrock/mozorg/urls.py index 277a036adc..17490b663b 100644 --- a/bedrock/mozorg/urls.py +++ b/bedrock/mozorg/urls.py @@ -25,7 +25,6 @@ urlpatterns = patterns('', page('about/governance', 'mozorg/about/governance/governance.html'), page('about/governance/roles', 'mozorg/about/governance/roles.html'), page('about/governance/policies', 'mozorg/about/governance/policies/policies.html'), - page('about/governance/policies/security-group', 'mozorg/about/governance/policies/security/group.html'), page('about/governance/policies/security-group/bugs', 'mozorg/about/governance/policies/security/bugs.html'), page('about/governance/policies/security-group/tld-idn', 'mozorg/about/governance/policies/security/tld-idn.html'), page('about/governance/policies/security-group/membership', 'mozorg/about/governance/policies/security/membership.html'), diff --git a/bedrock/settings/base.py b/bedrock/settings/base.py index 91824a6a30..6ef52184f1 100644 --- a/bedrock/settings/base.py +++ b/bedrock/settings/base.py @@ -328,9 +328,6 @@ MINIFY_BUNDLES = { 'research': ( 'css/research/research.less', ), - 'security-group': ( - 'css/mozorg/security-group.less', - ), 'security-tld-idn': ( 'css/mozorg/security-tld-idn.less', ), diff --git a/media/css/mozorg/security-group.less b/media/css/mozorg/security-group.less deleted file mode 100644 index e6233872d5..0000000000 --- a/media/css/mozorg/security-group.less +++ /dev/null @@ -1,28 +0,0 @@ -// This Source Code Form is subject to the terms of the Mozilla Public -// License, v. 2.0. If a copy of the MPL was not distributed with this -// file, You can obtain one at http://mozilla.org/MPL/2.0/. - -@import "../sandstone/lib.less"; - -ul.members { - -webkit-columns: 2; - -moz-columns: 2; - columns: 2; - -webkit-column-gap: @baseLine * 3; - -moz-column-gap: @baseLine * 3; - column-gap: @baseLine * 3; -} - -/* {{{ Wide Mobile Layout: 480px */ - -@media only screen and (min-width: @breakMobileLandscape) and (max-width: @breakTablet) { - - ul.members { - -webkit-columns: 1; - -moz-columns: 1; - columns: 1; - } - -} - -/* }}} */