<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Symantec votes YES<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Ben Wilson<br><b>Sent:</b> Wednesday, September 05, 2012 7:18 PM<br><b>To:</b> public@cabforum.org<br><b>Subject:</b> [cabfpub] Ballot [88] - BR_9_2_4_Errata-ISO3166<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>All,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This proposal was reviewed and discussed previously as Ballot 86, which was pulled from voting so that we could clarify the language. Therefore, the seven-day voting period will re-start and will close at 24:00 UTC on 12 September 2012. As an experiment, the markup used below is based on the CABForum’s wiki formatting (MoinMoin Wiki Syntax). “__” means begin and end inserted language and “--" means begin and end deleted language. A redlined PDF is also attached for review.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Jeremy Rowley made the following motion and Rick Andrews and Rich Smith endorsed it:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>... Motion begins...<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Effective immediately<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>... Erratum begins ...<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>1. Add a new Definition: __Country: Either a member of the United Nations OR a geographic region recognized as a sovereign nation by at least two UN member nations.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>2. Modify the following sections as indicated below:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>9.2 Subject Information<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>By issuing the Certificate, the CA represents that it followed the procedure set forth in its Certificate Policy and/or Certification Practice Statement to verify that, as of the Certificate’s issuance date, all of the Subject Information was accurate. __CAs SHALL NOT include a Domain Name in a Subject attribute except as specified in Sections 9.2.1 and 9.2.2 below.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>9.2.4 Subject --(Organization)-- __Distinguished__ Name Field__s__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__a.__ Certificate Field--(s)--:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>. --(Organization name:)-- __subject:__organizationName (OID 2.5.4.10)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Optional. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Contents: If present, the subject:organizationName field MUST contain either the Subject’s name or DBA as verified under Section 11.2. The CA may include information in this field that differs slightly from the verified name, such as common variations or abbreviations, provided that the CA documents the difference and any abbreviations used are locally accepted abbreviations; e.g., if the official record shows “Company Name Incorporated”, the CA MAY use “Company Name Inc.” or “Company Name”. Because Subject name attributes for individuals (e.g. givenName (2.5.4.42) and surname (2.5.4.4)) are not broadly supported by application software, the CA MAY use the subject:organizationName field to convey a natural person Subject’s name or DBA. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__b.__ __Certificate Field:__ subject:streetAddress (OID: 2.5.4.9)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Optional''' if the subject:organizationName field is present. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Prohibited''' if the subject:organizationName field is absent.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Contents: If present, the subject:streetAddress field MUST contain the Subject’s street address information as verified under Section 11.2. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__c. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>. --(City or town)-- __Certificate Field__: subject:localityName (OID: 2.5.4.7)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Required''' if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Optional''' if the subject:organizationName field and subject:stateOrProvinceName fields are present. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Prohibited''' if the subject:organizationName field is absent.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Contents: If present, the subject:localityName field MUST contain the Subject’s locality information as verified under Section 11.2. If the subject:countryName field specifies the ISO 3166-1 user-assigned code of XX in accordance with Section 9.2.5, the localityName field MAY contain the Subject’s locality and/or state or province information as verified under Section 11.2. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__d. Certificate Field:__ --(State or province (where applicable))-- subject:stateOrProvinceName (OID: 2.5.4.8)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Required''' if subject:organizationName field is present and subject:localityName field is absent. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Optional''' if subject:organizationName and subject:localityName fields are present. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Prohibited''' if subject:organizationName field is absent.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__ __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Contents: If present, the subject:stateOrProvinceName field MUST contain the Subject’s state or province information as verified under Section 11.2. If the subject:countryName field specifies the ISO 3166-1 user-assigned code of XX in accordance with Section 9.2.5, the subject:stateOrProvinceName field MAY contain the full name of the Subject’s country information as verified under Section 11.2.5.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>--(Country subject:countryName (OID: 2.5.46))--<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__e. Certificate Field: subject:postalCode (OID: 2.5.4.17) __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Optional''' if subject:organizationName field is present. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Prohibited''' if subject:organizationName field is absent. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>____<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Contents: If present, the subject:postalCode field MUST contain the Subject’s zip or postal information as verified under Section 11.2.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>9.2.5 Subject Country Name Field<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Certificate Field: subject:countryName (OID: 2.5.4.6)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>--(Required/Optional: )----(Optional.)-- __ __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Required''' if the subject:organizationName field is present. __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__'''Optional''' if the subject:organizationName field is absent.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Contents: If the --(subject:countryName field is present, then the CA SHALL verify the country associated with the Subject in accordance with Section 11.2.5 and use its two-letter ISO 3166-1 country code)-- __ subject:organizationName field is present, the subject:countryName MUST contain the two-letter ISO 3166-1 country code associated with the location of the Subject verified under Section 11.2. If the subject:organizationName field is absent, the subject:countryName field MAY contain the two-letter ISO 3166-1 country code associated with the Subject as verified in accordance with Section 11.2.5. If a Country is not represented by an official ISO 3166-1 country code, the CA MAY specify the ISO 3166-1 user-assigned code of XX indicating that an official ISO 3166-1 alpha-2 code has not been assigned.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>3. Change the heading of Section 9.2.6 as follows:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>9.2.6 --( Other)-- Subject __Organizational Unit Field __--(Attributes )--<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>4. Replace the following sentences of Section 9.2.6:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>--(With the exception of the subject:organizationalUnitName (OU) attribute, optional attributes, when present within the subject field, MUST contain information that has been verified by the CA. Metadata such as ‘.’, ‘-‘, and ‘ ‘ (i.e. space) characters, and/or any other indication that the value is absent, incomplete, or not applicable, SHALL NOT be used. CAs SHALL NOT include Fully-Qualified Domain Names in Subject attributes except as specified in Sections 9.2.1 and 9.2.2, above.)--<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>With:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Certificate Field: subject:organizationalUnitName __<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__Optional.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>5. Add Section 9.2.7:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__9.2.7 Other Subject Attributes__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__All other optional attributes, when present within the subject field, MUST contain information that has been verified by the CA. Optional attributes MUST NOT contain metadata such as ‘.’, ‘-‘, and ‘ ‘ (i.e. space) characters, and/or any other indication that the value is absent, incomplete, or not applicable.__<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>.... Erratum ends ...<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The review period for this ballot already occurred when it was presented as Ballot 86. Therefore, the voting period will start immediately and will close at 24:00 UTC on 12 September 2012. Votes must be cast by posting an on-list reply to this thread.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>... Motions ends ...<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A vote in favor of the motion must indicate a clear 'yes' in the response.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Voting members are listed here: <a href="http://www.cabforum.org/forum.html"><span style='color:windowtext'>http://www.cabforum.org/forum.html</span></a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and one half or more of the votes cast by members in the browser category must be in favor. Also, at least seven members must participate in the ballot, either by voting in favor, voting against or abstaining.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>__ __<o:p></o:p></p></div></body></html>