<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
@font-face
{font-family:Verdana}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Verdana","sans-serif"}
p.line874, li.line874, div.line874
{margin-right:0cm;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
p.line867, li.line867, div.line867
{margin-right:0cm;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
p.line862, li.line862, div.line862
{margin-right:0cm;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
span.E-mailStijl20
{font-family:"Calibri","sans-serif";
color:windowtext}
span.apple-converted-space
{}
span.E-mailStijl22
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.TekstzonderopmaakChar
{font-family:"Verdana","sans-serif"}
.MsoChpDefault
{font-size:10.0pt}
@page Section1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.Section1
{}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="Section1">
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:#1F497D">All,</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoPlainText">In addition to the remarks that have already been made by S<span style="color:#1F497D">y</span>mant<span style="color:#1F497D">e</span>c and SECOM Trust Systems, I would also like to express my doubts about this ballot on behalf of PKIoverheid.
PKIoverheid agrees with the spirit of this ballot as well. However, I suspect that practical implementation of this requirement will be hard for at least<span style="color:#1F497D">
</span>some of the CSPs that are part of the PKIoverheid hierarchy. <span style="color:#1F497D">
</span></p>
<p class="MsoPlainText"><span style="color:#1F497D"> </span></p>
<p class="MsoPlainText">Since the option RFC2560 offered with regard to CRL distribution points for OCSP responder signing certificates has been denied to CAs by<span style="color:#1F497D">
</span>Baseline requirement 13.2.5, CSPs of PKIoverheid had to put a lot of effort in changing their OCSP architecture. On behalf of these CSPs, PKIoverheid will have to vote against this motion as it currently stands. CAs have not been given proper time to
investigate the impact of this new requirement thoroughly and my feeling is that the required implementation period of half a year is really too short to revamp one’s OCSP architecture if need be (for example, in case of CRL based OCSP responses).
</p>
<p class="MsoPlainText"><span style="color:#1F497D"> </span></p>
<p class="MsoPlainText">A lot of us are currently in the middle of the summer holidays. Therefore, I would propose to withdraw this motion temporarily and give CAs at least some time to further investigate the impact of this new requirement. The motion could
be proposed again at the start of October.</p>
<p class="MsoPlainText"> </p>
<p class="MsoPlainText"> </p>
<p class="MsoNormal"><span style="font-size:7.5pt; font-family:"Verdana","sans-serif"">Best Regards,<br>
<br>
<b>Mark Janssen</b><br>
Senior Advisor PKIoverheid<br>
........................................................................<br>
</span><b><span lang="EN-GB" style="font-size:7.5pt; font-family:"Verdana","sans-serif"">Logius<br>
The ministry of the Interior and Kingdom Relations (BZK)</span></b><span lang="EN-GB" style="font-size:9.0pt; font-family:"Verdana","sans-serif""><br>
</span><span lang="EN-GB" style="font-size:7.5pt; font-family:"Verdana","sans-serif"">Wilhelmina van Pruisenweg 52 | 2595 AN | The Hague<br>
P.O. Box 96810 | 2509 JE | The Hague<br>
........................................................................<br>
</span><span style="font-size:7.5pt; font-family:"Verdana","sans-serif"">T +31(0) 70 8887 967<br>
F +31(0) 70 8887 882<br>
</span><span lang="NL" style="font-size:9.0pt; font-family:"Verdana","sans-serif""><a href="mailto:mark.janssen@logius.nl" target="_blank" title="mailto:mark.janssen@logius.nl"><span lang="EN-US" style="font-size:7.5pt">mark.janssen@logius.nl</span></a></span><span style="font-size:9.0pt; font-family:"Verdana","sans-serif""><br>
</span><span lang="FR" style="font-size:9.0pt; font-family:"Verdana","sans-serif""><a href="https://webmail.ictu.nl/exchweb/bin/redir.asp?URL=http://www.logius.nl/" target="_blank" title="https://webmail.ictu.nl/exchweb/bin/redir.asp?URL=http://www.logius.nl/"><span style="font-size:7.5pt">http://www.logius.nl/</span></a></span><span style="font-size:9.0pt; font-family:"Verdana","sans-serif""><br>
</span><span style="font-size:7.5pt; font-family:"Verdana","sans-serif"">........................................................................<br>
<b>Service e-government</b><br>
........................................................................</span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:7.5pt; font-family:"Verdana","sans-serif"; color:green">Please consider the environment - do you really need to print this mail?</span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="NL" style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">Van:</span></b><span lang="NL" style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>Namens </b>Tim Moses<br>
<b>Verzonden:</b> vrijdag 20 juli 2012 20:41<br>
<b>Aan:</b> CABFPub<br>
<b>Onderwerp:</b> [cabfpub] Ballot[80] - BR Response for non-issued certificates</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="line874" style="background:white"><span style="font-family:"Arial","sans-serif"; color:black">Yngve Pettersen made the following motion and Ben Wilson and Carsten Dahlenkamp endorsed it:</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">... Motion begins....</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">Effective 1 Feb 2013</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">... Erratum begins ...</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">Insert a new section at the end of section 13.2 of the Baseline Requirements with the following heading and text:</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">"13.2.6 Response for non-issued certificates</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">If the OCSP responder receives a request for status of a certificate that has not been issued, then the responder MUST NOT respond with a "good" status. The CA SHOULD monitor the responder for such
requests as part of its security response procedures."</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">... Erratum ends ...</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">The ballot review period comes into effect at 21:00 UTC on 19 July 2012 and will close at 21:00 UTC on 26 July 2012. Unless the motion is withdrawn during the review period, the voting period will
start immediately thereafter and will close at 21:00 UTC on 2 August 2012. Votes must be cast by posting an on-list reply to this thread.</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">... Motions ends ...</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">A vote in favor of the motion must indicate a clear 'yes' in the response.</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any
representative of a voting member before the close of the voting period will be counted.</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">Voting members are listed here:</span></p>
<p class="line867" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black"><a href="http://www.cabforum.org/forum.html"><span style="border:none windowtext 1.0pt; padding:0cm">http://www.cabforum.org/forum.html</span></a></span></p>
<p class="line862" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">with the addition of<span class="apple-converted-space"> </span><a href="https://www.cabforum.org/wiki/TrendMicro"><span style="color:gray; border:none windowtext 1.0pt; padding:0cm">TrendMicro</span></a>.</span></p>
<p class="line874" style="background:white; orphans:2; widows:2; word-spacing:0px">
<span style="font-family:"Arial","sans-serif"; color:black">In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and one half or more of the votes cast by members in the browser category must be in favour.
Also, at least seven members must participate in the ballot, either by voting in favour, voting against or abstaining.</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">T: +1 613 270 3183</p>
<p class="MsoNormal"> </p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid
voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.<br>
This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind
resulting from the risks inherent in the electronic transmission of messages. .<br>
</font>
</body>
</html>