<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Ballot 100 - Extend Deadline - OCSP Good Response <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Motion: <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Joe Kaluzny made the following motion, and Stephen Davidson and Steve Roylance endorsed it:<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>---<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Motion begins <o:p></o:p></p><p class=MsoNormal>---<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>EFFECTIVE IMMEDIATELY, in order to allow third party vendors of OCSP responders to enable their software to support the requirement, we propose extending the compliance deadline for section 13.2.6 with the following erratum:<o:p></o:p></p><p class=MsoNormal>---<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Erratum begins <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>--- <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In Section 13.2.6 of the Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates, DELETE: <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>13.2.6 Response for non-issued certificates <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>If the OCSP responder receives a request for status of a certificate that has not been issued, then the responder SHOULD NOT respond with a "good" status. The CA SHOULD monitor the responder for such requests as part of its security response procedures. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Effective 1 August 2013, OCSP responders MUST NOT respond with a "good" status for such certificates. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>And INSERT: <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>13.2.6 Response for non-issued certificates <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>If the OCSP responder receives a request for status of a certificate that has not been issued, then the responder SHOULD NOT respond with a "good" status. The CA SHOULD monitor the responder for such requests as part of its security response procedures. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Effective 1 August 2013, OCSP responders SHOULD NOT respond with a "good" status for such certificates. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Effective 1 August 2014, OCSP responders MUST NOT respond with a "good" status for such certificates. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>--- <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Erratum ends <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>---<o:p></o:p></p><p class=MsoNormal>The ballot review period comes into effect at 2100 UTC on 23 May 2013 and will close at 2100 UTC on 30 May 2013. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2100 UTC on 6 June 2013.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Votes must be cast by an on-list reply to this thread. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A vote in favor of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The latest vote received from any representative of a voting member before the close of the voting period will be counted. <o:p></o:p></p><p class=MsoNormal>--- <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Motion ends <o:p></o:p></p><p class=MsoNormal>--- <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Voting members are listed here: http://www.cabforum.org/forum.html <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and one half or more of the votes cast by members in the browser category must be in favor. The current quorum number is seven. Therefore, at least seven members must participate in the ballot, either by voting in favor, voting against, or indicating their abstention.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>