<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<base href="">
</head>
<body style="word-wrap:break-word">
Trustwave votes yes
<div><br>
<div>
<div>On Feb 6, 2013, at 10:44 PM, Jeremy Rowley <<a href="mailto:jeremy.rowley@digicert.com">jeremy.rowley@digicert.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div lang="EN-US" style="font-family:Helvetica; font-size:medium; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:2; text-indent:0px; text-transform:none; white-space:normal; widows:2; word-spacing:0px">
<div class="WordSection1" style="">
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">If passed, the motion will restrict CAs from issuing Certificates with extensions and other contents that the CA doesn’t understand or have a purpose of including in the certificate.</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">-----</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">Jeremy Rowley made the following motion, and Ryan Hurst and Robin Alden endorsed it:</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">... Motion Begins ...</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">... Erratum Begins ...</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">A. In Section 10.2.3, after the first paragraph, insert: “The CA SHALL establish and follow a documented procedure for verifying all data requested for inclusion in the Certificate by the Applicant.”</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">B. In Appendix B, add paragraph numbers to the headings: “(1) Root CA Certificate”, “(2) Subordinate CA Certificate”, and “(3) Subscriber Certificate”.</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">C. In three places in Appendix B, delete: “All other fields and extensions MUST be set in accordance with RFC 5280.”</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">D. In Appendix B, insert paragraph 4, as follows</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">“(4) All Certificates</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">All other fields and extensions MUST be set in accordance with RFC 5280. The CA SHALL NOT issue a Certificate that contains a keyUsage flag, extendedKeyUsage value, Certificate extension, or other data not specified in this Appendix
B unless the CA is aware of a reason for including the data in the Certificate.</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">CAs SHALL NOT issue a Certificate with:</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">a) Extensions that do not apply in the context of the public Internet (such as an extendedKeyUsage value for a service that is only valid in the context of a privately managed network), unless:</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">i. such value falls within an OID arc for which the Applicant demonstrates ownership; or</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">ii. the Applicant can otherwise demonstrate the right to assert the data in a public context; or</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">b) semantics that, if included, will mislead a Relying Party about the certificate information verified by the CA (such as including extendedKeyUsage value for a smart card, where the CA is not able to verify that the corresponding
Private Key is confined to such hardware due to remote issuance).</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">... Erratum ends ...</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">The review period for this ballot shall commence at 21:00 UTC on 7 February 2013 and will close at 21:00 UTC on 14 February 2013. Unless the motion is withdrawn during the review period, the voting period will start immediately
thereafter and will close at 21:00 UTC on 21 February 2013. Votes must be cast by posting an on-list reply to this thread.</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">... Motions ends ...</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">A vote in favor of the motion must indicate a clear 'yes' in the response.</span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member
before the close of the voting period will be counted.</span></p>
<p class="line862" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">Voting members are listed here:<span class="Apple-converted-space"> </span><a href="http://www.cabforum.org/forum.html" style="color:purple; text-decoration:underline">http://www.cabforum.org/forum.html</a></span></p>
<p class="line874" style="margin-right:0in; margin-left:0in; font-size:12pt; font-family:'Times New Roman',serif">
<span style="font-size:10pt">In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and one half or more of the votes cast by members in the browser category must be in favor. Also, at least six members must
participate in the ballot, either by voting in favor, voting against or abstaining.</span></p>
<div style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif">
<span style="font-size:10pt"> </span></div>
</div>
_______________________________________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org" style="color:purple; text-decoration:underline">Public@cabforum.org</a><br>
<a href="https://cabforum.org/mailman/listinfo/public" style="color:purple; text-decoration:underline">https://cabforum.org/mailman/listinfo/public</a></div>
</blockquote>
</div>
<br>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information
contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.<br>
</font>
</body>
</HTML>