{"action":"opened","issue":{"url":"https://api.github.com/repos/mozilla/pkipolicy/issues/5","repository_url":"https://api.github.com/repos/mozilla/pkipolicy","labels_url":"https://api.github.com/repos/mozilla/pkipolicy/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/pkipolicy/issues/5/comments","events_url":"https://api.github.com/repos/mozilla/pkipolicy/issues/5/events","html_url":"https://github.com/mozilla/pkipolicy/issues/5","id":187699254,"number":5,"title":"Update algorithms and key sizes list to reference the BRs","user":{"login":"gerv","id":299746,"avatar_url":"https://avatars.githubusercontent.com/u/299746?v=3","gravatar_id":"","url":"https://api.github.com/users/gerv","html_url":"https://github.com/gerv","followers_url":"https://api.github.com/users/gerv/followers","following_url":"https://api.github.com/users/gerv/following{/other_user}","gists_url":"https://api.github.com/users/gerv/gists{/gist_id}","starred_url":"https://api.github.com/users/gerv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gerv/subscriptions","organizations_url":"https://api.github.com/users/gerv/orgs","repos_url":"https://api.github.com/users/gerv/repos","events_url":"https://api.github.com/users/gerv/events{/privacy}","received_events_url":"https://api.github.com/users/gerv/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-07T12:27:17Z","updated_at":"2016-11-07T12:27:17Z","closed_at":null,"body":"After [discussion in m.d.s.policy](https://groups.google.com/forum/#!msg/mozilla.dev.security.policy/smAUN2Rtc78/T5rEAFmMAwAJ), the following changed was proposed by Kathleen and received a reasonable amount of support with no dissent. It is to change section 8 of the Maintenance section of the policy to, instead of explicitly listing all the algorithms, read as follows:\r\n\r\n<blockquote>\r\n8. We consider the algorithms and key sizes specified in section 6.1.5\r\nof version 1.3 or later of the CA/Browser Forum Baseline Requirements\r\nfor the Issuance and Management of Publicly-Trusted Certificates to be\r\nacceptable and supported in Mozilla products; with the following exceptions.\r\n- Mozilla does not and will not support DSA keys\r\n- Mozilla does not currently support ECC curve P-521\r\n</blockquote>\r\n\r\nNote that this might have an effect on the scope of any SHA-1 ban, because Mozilla's policy is scoped differently to the BRs."}}
{"actor":{"display_login":"gerv"}}