This repository is for the open development of the:
- Certificate Policy, and
- Certification Practice Statement (non-redacted portions)
for the US Federal Government and our efforts on a new Public Trust Root and Issuing CA infrastructure.
The scope of the effort will include:
- TLS certificates only
- To continue support for Memorandum 15-13 HTTPS Everywhere (https://https.cio.gov)
- For webservices on the Internet
- Certificate Transparency (CT)
- CT logging and support
- Name Constraints
- Issuing certificates for US government properties
- Name constraints will include .gov and .mil at a minimum
- Name Redaction
- Allowing for name redaction is not expected to be included
For information on how to contribute to the site, review How to Comment. The source repository exists here.
Direct changes and line edits to the content may be submitted through a pull request or by opening Issues for discussion. You do not need to install any software to submit content.
This repository is for open and transparent public reviews and contributions. The General Services Administration is supporting this effort and maintains the repository for the US Federal Government.
Please contact eric.mill at gsa dot gov or lachelle.levan at gsa dot gov with questions.
This work is based on the CA/Browser Forum Baseline Requirements v1.4.1, which is licensed under the Creative Commons Attribution 4.0 International License.
All contributions to this project waive copyright and related rights in the work worldwide through the CC0 1.0 Universal public domain dedication. Any original contributions by United States government employees are automatically in the public domain within the United States.
As stated in CONTRIBUTING:
All contributions to this project will be released into the public domain worldwide through the CC0 1.0 Universal public domain dedication.
By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.