18F/18f.gsa.gov — pull request #399 by konklone (2014-11-27 02:01:34+00:00)
Title: A first pass at a third party disclosure page

I added a page for third party service disclosure, and attempted to explain how each one plays into our overall service. It also explains what extra things we do to try to protect privacy.

You can see the page, and the new link in the footer, in this screenshot:

![third parties](https://cloud.githubusercontent.com/assets/4592/5211390/1ceac686-75af-11e4-82ca-19e3b2182eaa.png)

If we keep going with our current plan, we can eventually remove the webfont dependency, and limit OCSP privacy leakage to browsers on Safari (which doesn't support stapling at all, but does make OCSP calls).

This [giant Symantec PDF](http://www.symantec.com/content/en/us/about/media/repository/stn-cps.pdf) shows Symantec referencing their overall privacy policy to cover their work as a CA.

Fixes #293.