<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
p.line867, li.line867, div.line867
{mso-style-name:line867;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>GlobalSign believes in this amendment and would like to see the described behavior become the codified behavior for all OCSP servers.<o:p></o:p></span></p><p class=MsoNormal><a name="_MailEndCompose"><span style='color:#1F497D'><o:p> </o:p></span></a></p><p class=MsoNormal><span style='color:#1F497D'>We like others use third-party products to offer our OCSP responses and have not had sufficient time to work on a plan with those vendors to get timelines for the associated changes in place.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>And while we feel the extension from six months to one year helps address this problem I am still unsure of what my vendors ability to respond is on this issue and starting over by building my own would likely take longer than the allotted time given existing commitments.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>As such unfortunately we cannot yes at this time, if the period were extended an additional six months I feel I could find a way to make it happen and would be able to vote yes. <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Alternatively if the vote was withheld for a few weeks I could begin to work with my suppliers to identify what reasonable timeframe could be met at which point I could understand what timeframe we could commit to.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Ryan<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> management-bounces@cabforum.org [mailto:management-bounces@cabforum.org] <b>On Behalf Of </b>Eddy Nigg (StartCom Ltd.)<br><b>Sent:</b> Wednesday, August 01, 2012 11:37 AM<br><b>To:</b> 'management@cabforum.org'<br><b>Cc:</b> CABFPub<br><b>Subject:</b> Re: [cabfman] [cabfpub] Ballot[80 - revised] - BR Response for non-issued certificates<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>StartCom votes YES<br><br>On 07/26/2012 11:28 PM, From Tim Moses: <o:p></o:p></p><p class=line874 style='background:white'><span style='font-family:"Arial","sans-serif"'>Yngve Pettersen has accepted a “friendly amendment”. Ben Wilson and Carsten Dahlenkamp are requested to confirm their continued endorsement. The motion now reads as follows:</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>... Motion begins....</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>Effective 1 Feb 2013</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>... Erratum begins ...</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>Insert a new section at the end of section 13.2 of the Baseline Requirements with the following heading and text:</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>"13.2.6 Response for non-issued certificates</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>If the OCSP responder receives a request for status of a certificate that has not been issued, then the responder SHOULD NOT respond with a "good" status. The CA SHOULD monitor the responder for such requests as part of its security response procedures.</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>Effective 1 August 2013, OCSP responders MUST NOT respond with a "good" status for such certificates."</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>... Erratum ends ...</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>The ballot review period comes into effect at 21:00 UTC on 19 July 2012 and will close at 21:00 UTC on 26 July 2012. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 21:00 UTC on 2 August 2012. Votes must be cast by posting an on-list reply to this thread.</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>... Motions ends ...</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>A vote in favor of the motion must indicate a clear 'yes' in the response.</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted.</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>Voting members are listed here:</span><o:p></o:p></p><p class=line867 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'><a href="http://www.cabforum.org/forum.html"><span style='border:none windowtext 1.0pt;padding:0in'>http://www.cabforum.org/forum.html</span></a></span><o:p></o:p></p><p class=line862 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>with the addition of<span class=apple-converted-space> </span><a href="https://www.cabforum.org/wiki/TrendMicro"><span style='color:gray;border:none windowtext 1.0pt;padding:0in'>TrendMicro</span></a>.</span><o:p></o:p></p><p class=line874 style='background:white;orphans:
2;text-align:-webkit-auto;widows: 2;-webkit-text-size-adjust:
auto;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-family:"Arial","sans-serif"'>In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and one half or more of the votes cast by members in the browser category must be in favour. Also, at least seven members must participate in the ballot, either by voting in favour, voting against or abstaining</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>T: +1 613 270 3183<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br><br><br><o:p></o:p></span></p><pre>_______________________________________________<o:p></o:p></pre><pre>Public mailing list<o:p></o:p></pre><pre><a href="mailto:Public@cabforum.org">Public@cabforum.org</a><o:p></o:p></pre><pre><a href="http://cabforum.org/mailman/listinfo/public">http://cabforum.org/mailman/listinfo/public</a><o:p></o:p></pre></div></body></html>