<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas","serif";
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Eddy, I don’t remember any discussion about revoking pre-Baseline Requirement certs that had validity periods longer than 60 months (or 39 months).
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The only discussion I recall related to new validity period rules to apply to NEW certs issued AFTER the effective date of the BRs – which resulted in BR 9.4
below. And I don’t remember any discussion about limiting re-keying certs that had been issued before the BRs become effective – I don’t think CAs would have agreed to that because it would have put them in breach of contract with their existing customers
as to existing certs.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:24.0pt"><b><i>9.4 Validity Pe<span style="letter-spacing:-.05pt">r</span><span style="letter-spacing:.05pt">i</span>od</i></b><o:p></o:p></p>
<p class="MsoNormal" style="margin-top:.4pt;line-height:5.5pt;mso-line-height-rule:exactly">
<span style="font-size:5.5pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:69.95pt;margin-bottom:0in;margin-left:6.0pt;margin-bottom:.0001pt;text-align:justify">
<span style="font-size:10.0pt">Certificates issued after the<span style="letter-spacing:-.05pt"> E</span>ffecti<span style="letter-spacing:.05pt">v</span>e<span style="letter-spacing:-.05pt">
</span>Date<span style="letter-spacing:-.05pt"> </span>MUST<span style="letter-spacing:-.05pt">
</span><span style="letter-spacing:.05pt">h</span><span style="letter-spacing:-.05pt">a</span><span style="letter-spacing:.05pt">v</span>e a<span style="letter-spacing:-.05pt">
</span>Vali<span style="letter-spacing:.05pt">d</span>ity Period no <span style="letter-spacing:.05pt">
g</span>reater t<span style="letter-spacing:.05pt">h</span>an <span style="letter-spacing:.05pt">
6</span>0 <span style="letter-spacing:-.1pt">m</span><span style="letter-spacing:.05pt">on</span>t<span style="letter-spacing:.05pt">h</span>s.<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:6.0pt;mso-line-height-rule:exactly"><span style="font-size:6.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:3.4pt;margin-bottom:0in;margin-left:6.0pt;margin-bottom:.0001pt;text-align:justify">
<span style="font-size:10.0pt">Exc<span style="letter-spacing:-.05pt">e</span>pt<span style="letter-spacing:.65pt">
</span>as<span style="letter-spacing:.7pt"> </span><span style="letter-spacing:-.05pt">p</span>r<span style="letter-spacing:-.05pt">ov</span>ided<span style="letter-spacing:.65pt">
</span>f<span style="letter-spacing:-.05pt">o</span>r<span style="letter-spacing:.7pt">
</span>be<span style="letter-spacing:-.1pt">l</span><span style="letter-spacing:.05pt">o</span><span style="letter-spacing:-.05pt">w</span>,<span style="letter-spacing:.7pt">
</span>Certificates<span style="letter-spacing:.7pt"> </span>issu<span style="letter-spacing:-.05pt">e</span>d<span style="letter-spacing:.7pt">
</span>after<span style="letter-spacing:.65pt"> </span>1<span style="letter-spacing:.65pt">
</span>A<span style="letter-spacing:-.05pt">p</span>ril<span style="letter-spacing:.65pt">
</span>2<span style="letter-spacing:-.05pt">01</span>5<span style="letter-spacing:.7pt">
</span><span style="letter-spacing:-.1pt">M</span>UST<span style="letter-spacing:.65pt">
</span>have<span style="letter-spacing:.7pt"> </span>a<span style="letter-spacing:.65pt">
</span><span style="letter-spacing:-.05pt">V</span>ali<span style="letter-spacing:.05pt">d</span>ity<span style="letter-spacing:.65pt">
</span>Period<span style="letter-spacing:.65pt"> </span>no<span style="letter-spacing:.65pt">
</span>gr<span style="letter-spacing:-.05pt">e</span>ater<span style="letter-spacing:.7pt">
</span>t<span style="letter-spacing:.05pt">h</span><span style="letter-spacing:-.05pt">a</span>n<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:426.95pt;margin-bottom:0in;margin-left:6.0pt;margin-bottom:.0001pt;text-align:justify;line-height:11.45pt;mso-line-height-rule:exactly">
<span style="font-size:10.0pt;letter-spacing:.05pt">3</span><span style="font-size:10.0pt">9
<span style="letter-spacing:-.1pt">m</span><span style="letter-spacing:.05pt">on</span>t<span style="letter-spacing:.05pt">hs.</span><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-top:.15pt;line-height:6.0pt;mso-line-height-rule:exactly">
<span style="font-size:6.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:3.15pt;margin-bottom:0in;margin-left:6.0pt;margin-bottom:.0001pt;text-align:justify;line-height:11.5pt;mso-line-height-rule:exactly">
<span style="font-size:10.0pt">Bey<span style="letter-spacing:.05pt">o</span>nd<span style="letter-spacing:.05pt">
</span>1 A<span style="letter-spacing:.05pt">p</span>r<span style="letter-spacing:-.1pt">i</span>l
<span style="letter-spacing:.05pt">2</span><span style="letter-spacing:-.05pt">0</span><span style="letter-spacing:.05pt">1</span><span style="letter-spacing:-.05pt">5</span>, CAs MAY co<span style="letter-spacing:.05pt">n</span>ti<span style="letter-spacing:.05pt">nu</span>e<span style="letter-spacing:-.05pt">
</span>to<span style="letter-spacing:.05pt"> </span>iss<span style="letter-spacing:.05pt">u</span>e Certifica<span style="letter-spacing:-.05pt">t</span>es with<span style="letter-spacing:.05pt">
</span>a<span style="letter-spacing:-.05pt"> </span>Vali<span style="letter-spacing:.05pt">d</span>ity Peri<span style="letter-spacing:.05pt">o</span>d greater t<span style="letter-spacing:.05pt">h</span>an 39
<span style="letter-spacing:-.1pt">m</span><span style="letter-spacing:.05pt">on</span>t<span style="letter-spacing:.05pt">h</span>s b<span style="letter-spacing:.05pt">u</span>t n<span style="letter-spacing:.05pt">o</span>t greater t<span style="letter-spacing:.05pt">h</span><span style="letter-spacing:-.05pt">a</span>n
<span style="letter-spacing:-.05pt">6</span>0 <span style="letter-spacing:-.1pt">
m</span>onths<span style="letter-spacing:-.05pt"> </span>p<span style="letter-spacing:-.05pt">r</span>ov<span style="letter-spacing:-.1pt">i</span><span style="letter-spacing:-.05pt">d</span>ed<span style="letter-spacing:.05pt">
</span>t<span style="letter-spacing:.05pt">h</span>at <span style="letter-spacing:-.1pt">
t</span><span style="letter-spacing:.05pt">h</span>e<span style="letter-spacing:.05pt">
</span><span style="letter-spacing:-.1pt">C</span>A do<span style="letter-spacing:-.05pt">c</span>u<span style="letter-spacing:-.1pt">m</span>ents t<span style="letter-spacing:.05pt">h</span>at t<span style="letter-spacing:.05pt">h</span>e Certificate is f<span style="letter-spacing:.05pt">o</span>r
a system or s<span style="letter-spacing:.05pt">o</span>ftware <span style="letter-spacing:-.1pt">
t</span><span style="letter-spacing:-.05pt">h</span>at:<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-top:.15pt;line-height:6.5pt;mso-line-height-rule:exactly">
<span style="font-size:6.5pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:24.0pt"><span style="font-size:10.0pt">(a) was
<span style="letter-spacing:-.1pt">i</span>n <span style="letter-spacing:.05pt">u</span>se<span style="letter-spacing:-.05pt">
</span><span style="letter-spacing:.05pt">p</span>r<span style="letter-spacing:-.1pt">i</span><span style="letter-spacing:-.05pt">o</span>r to t<span style="letter-spacing:.05pt">h</span>e Effecti<span style="letter-spacing:.05pt">v</span>e<span style="letter-spacing:-.05pt">
</span>Date;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-top:.3pt;line-height:6.5pt;mso-line-height-rule:exactly">
<span style="font-size:6.5pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:92.2pt;margin-bottom:0in;margin-left:24.0pt;margin-bottom:.0001pt;line-height:157%">
<span style="font-size:10.0pt;line-height:157%">(<span style="letter-spacing:-.05pt">b</span>) is c<span style="letter-spacing:.05pt">u</span>rre<span style="letter-spacing:.05pt">n</span>tly in
<span style="letter-spacing:.05pt">u</span>se<span style="letter-spacing:-.05pt">
</span><span style="letter-spacing:.05pt">b</span>y eit<span style="letter-spacing:.05pt">h</span>er the A<span style="letter-spacing:.05pt">pp</span>lica<span style="letter-spacing:.05pt">n</span>t<span style="letter-spacing:-.05pt">
</span>or<span style="letter-spacing:-.1pt"> </span>a su<span style="letter-spacing:.05pt">b</span>sta<span style="letter-spacing:.05pt">n</span>tial<span style="letter-spacing:-.05pt">
</span>n<span style="letter-spacing:.05pt">u</span><span style="letter-spacing:-.1pt">m</span><span style="letter-spacing:.05pt">b</span>er of Relyi<span style="letter-spacing:.05pt">n</span>g Parties;
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:92.2pt;margin-bottom:0in;margin-left:24.0pt;margin-bottom:.0001pt;line-height:157%">
<span style="font-size:10.0pt;line-height:157%">(c) fails to <span style="letter-spacing:.05pt">
op</span><span style="letter-spacing:-.05pt">e</span>rate if t<span style="letter-spacing:.05pt">h</span>e Vali<span style="letter-spacing:.05pt">d</span>ity<span style="letter-spacing:-.05pt">
</span>Period<span style="letter-spacing:.05pt"> </span>is<span style="letter-spacing:-.05pt">
</span>sh<span style="letter-spacing:.05pt">o</span>r<span style="letter-spacing:-.1pt">t</span>er t<span style="letter-spacing:.05pt">h</span>an 60<span style="letter-spacing:.05pt">
</span><span style="letter-spacing:-.1pt">m</span><span style="letter-spacing:.05pt">o</span>nt<span style="letter-spacing:.05pt">h</span>s;<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:.25pt;margin-right:0in;margin-bottom:0in;margin-left:24.0pt;margin-bottom:.0001pt">
<span style="font-size:10.0pt">(<span style="letter-spacing:-.05pt">d</span>) do<span style="letter-spacing:-.05pt">e</span>s not
<span style="letter-spacing:-.05pt">co</span>ntain k<span style="letter-spacing:-.05pt">no</span>wn se<span style="letter-spacing:-.05pt">c</span><span style="letter-spacing:.05pt">u</span>r<span style="letter-spacing:-.1pt">i</span>ty risks<span style="letter-spacing:.05pt">
</span><span style="letter-spacing:-.1pt">t</span>o<span style="letter-spacing:.05pt">
</span>Rel<span style="letter-spacing:-.05pt">y</span>ing Parties; <span style="letter-spacing:-.05pt">
an</span>d<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-top:.3pt;line-height:6.5pt;mso-line-height-rule:exactly">
<span style="font-size:6.5pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:24.0pt"><span style="font-size:10.0pt">(e) is
<span style="letter-spacing:.05pt">d</span>iffic<span style="letter-spacing:.05pt">u</span>lt to patch<span style="letter-spacing:.05pt">
</span>or<span style="letter-spacing:-.05pt"> </span>re<span style="letter-spacing:.05pt">p</span>lace wit<span style="letter-spacing:.05pt">h</span>o<span style="letter-spacing:.05pt">u</span>t su<span style="letter-spacing:.05pt">b</span>sta<span style="letter-spacing:.05pt">n</span>tial
eco<span style="letter-spacing:.05pt">no</span><span style="letter-spacing:-.1pt">m</span>ic<span style="letter-spacing:.05pt">
</span>o<span style="letter-spacing:.05pt">u</span>tlay.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>Eddy Nigg (StartCom Ltd.)<br>
<b>Sent:</b> Monday, August 05, 2013 3:28 PM<br>
<b>To:</b> public@cabforum.org<br>
<b>Cc:</b> mozilla-dev-security-policy@lists.mozilla.org; Tim Moses<br>
<b>Subject:</b> Re: [cabfpub] Concerns regarding Mozilla Root Program/Baseline Requirements<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><br>
On 07/31/2013 07:47 PM, From Wayne Thayer: <o:p></o:p></p>
<pre>This issue naturally goes away as these legacy certificates expire, and it is not a violation of our policies, nor do I believe is it a violation of the BRs. More importantly, It does not perpetuate any bad practices as some have suggested.<o:p></o:p></pre>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
I just leave you guys a few days out of sight (due to vacationing) and all this mess - some 60 plus messages to be read :-)<br>
<br>
Anyway, Wayne, I remind you that we discussed this exact issue and I recall that you agreed that any such certificate would be revoked (was it by October 2015?) and no more such certificates will be issued by Godaddy from the time of discussion. We'd have to
go back to the discussions, but I assume Tim Moses who lead the discussions and mediated at that time at the forum can confirm it.<br>
<br>
<o:p></o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td colspan="2" style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Regards <o:p></o:p></p>
</td>
</tr>
<tr>
<td colspan="2" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"> <o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Signer: <o:p></o:p></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Eddy Nigg, COO/CTO<o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"> <o:p></o:p></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="http://www.startcom.org">StartCom Ltd.</a><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">XMPP: <o:p></o:p></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Blog: <o:p></o:p></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="http://blog.startcom.org">Join the Revolution!</a><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Twitter: <o:p></o:p></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="http://twitter.com/eddy_nigg">Follow Me</a><o:p></o:p></p>
</td>
</tr>
<tr>
<td colspan="2" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"> <o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre><table class="TM_EMAIL_NOTICE"><tr><td><pre>
TREND MICRO EMAIL NOTICE
The information contained in this email and any attachments is confidential
and may be subject to copyright or other intellectual property protection.
If you are not the intended recipient, you are not authorized to use or
disclose this information, and we request that you notify us by reply mail or
telephone and delete the original message from your mail system.
</pre></td></tr></table></pre></font></td></tr></table>