<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><font face="Arial"><span style="font-size: 12px;">Dear all,</span></font></div><div><font face="Arial"><span style="font-size: 12px;"><br></span></font></div><div><font face="Arial"><span style="font-size: 12px;"><i>(Thanks Ben Wilson for helping me remove the minor mistakes in my initial draft)</i></span></font></div><div><font face="Arial"><span style="font-size: 12px;"><br></span></font></div><div><font face="Arial"><span style="font-size: 12px;">Please see the attached (Word and PDF versions) as a suggested update to the BRs to address the gaps we saw when viewing the guidelines with multiple parties over the last couple of months.</span></font></div><div><font face="Arial"><span style="font-size: 12px;"><br></span></font></div><div><span style="font-size: 12px; font-family: Arial; ">My 10,000 ft view (Which I hope is expressed clearly by the changes proposed) </span></div><ol><li><font face="Arial"><span style="font-size: 12px;"> All CAs are Audited or Technically constrained (as Mozilla's Rev 2.1 Policy now States so in reality it's applicable to everyone already)</span></font></li><li><font face="Arial"><span style="font-size: 12px;">There's no ability to opt out as BRs as they apply to all Roots and Subordinate CAs whether or not they are owned/run by the root authority or another Subordinate Authority lower down the chain. i.e. no gaps as it's the weak points that will hurt the industry.</span></font></li><li><font face="Arial"><span style="font-size: 12px;">The only exception in section 17 is that Technically constrained or not, the quarterly self audits should be done as that checks compliance to the other areas.</span></font></li></ol><div>Note that I added the section on SubCA subject naming as although it could be inferred from the issuer logic that section seemed to be more focused on Roots.</div><div><font face="Arial"><span style="font-size: 12px;"><br></span></font></div><div><font face="Arial"><span style="font-size: 12px;">I'm looking for a couple of volunteers to whip this into shape. Any takers?</span></font></div><div><font face="Arial"><span style="font-size: 12px;"><br></span></font></div><div><font face="Arial"><span style="font-size: 12px;">Steve</span></font></div></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; "><div><p style="font-size: 14px; font-family: Calibri, sans-serif; "></p><font class="Apple-style-span" style="font-size: 14px; font-family: Calibri, sans-serif; "><p style="font-family: Arial, sans-serif; "></p></font></div></div></body></html>