<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1183133900;
mso-list-type:hybrid;
mso-list-template-ids:-1651575860 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><b>Here are the Notes of the CABF Meeting held Thursday<span style='color:#1F497D'>,</span> 8 August 2013</b>.<o:p></o:p></p><p class=MsoNormal><b>Notes of meeting<o:p></o:p></b></p><p class=MsoNormal><b>CAB Forum <o:p></o:p></b></p><p class=MsoNormal><b>8 August 2013<o:p></o:p></b></p><p class=MsoNormal><b>Version 1<o:p></o:p></b></p><p class=MsoNormal><b>1. Present:</b> Atsushi Inaba, Ben Wilson, Jeremy Rowley, Wayne Thayer, Kirk Hall, Eddy Nigg, Richard Wang, Steve Roylance, Dean Coclin, Robin Alden, Connie Enke, Rick Andrews, Ryan Sleevi<o:p></o:p></p><p class=MsoNormal><b>2. Agenda review:</b> Approved as published. Steve asked that the latest version of the EV Guidelines be posted to the website. Ben and Wayne will coordinate after the call to get the current version up.<o:p></o:p></p><p class=MsoNormal><b>3. Minutes: </b>The minutes of <b>July 11, 2013</b> were approved. (We didn’t vote to approve them last meeting, but they are already published because the rules say that after 2 weeks of circulating them they are to be published.) The minutes of the teleconference of <b>July 25, 2013</b>, and the <b>Munich face-to-face meeting</b> were also approved. <o:p></o:p></p><p class=MsoNormal style='line-height:normal'><b>4. Ballots:</b> Dean said that he thought that Microsoft still wanted to discuss Ballot 106 and Ben said that even though <b>Ballot 106</b> (to extend the deadline for no "good" response for non-issued certificates) was withdrawn, he wondered how we could keep a placeholder without keeping it as an agenda item but stated the issue will likely come up again in due course. <b>Ballot 107</b> has only received a few votes and it closes tomorrow. Kirk said that we are seeing a problem when things go to ballot too quickly and that maybe we can have more discussion before they go to ballot. Ben said he thought we could go ahead and give it a ballot number if it looked clear it was going to become a ballot. Kirk said he wouldn’t give it a number, but just send around the draft stating that the proponent was considering a ballot with such text and solicit pre-ballot comments. Jeremy and Robin said they liked having a proposed number because it’s easier to track in their email and suggested that a subject line that makes it clear that it’s not an official ballot might work – like “proposed ballot 108a” “pre-ballot 108b”, etc.--then going back to “Ballot 108” could work. Rick suggested that we consider creating a pre-ballot stage. <o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'>Jeremy said that he withdrew <b>Ballot 108 </b>to replace the proposal with one that just requires an FQDN or internal server name and a Server Authentication EKU. He asked for any other suggestions to the proposed ballot. <o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'><b>Ballot 89 (EV Processing Guidelines</b>) – Rick said that he has tried to update the document but that the browsers are still not satisfied. Tom recently doubted whether they can be followed. Rick would like to remove the old version as soon as Wayne can get to it. Ben said he didn’t think we needed a ballot to remove the EV Processing Guidelines from the website. Eddy said that if we’ve had an important document on the website for 7 years, then we shouldn’t just remove it without more discussion and the browsers should vote to remove it if they want to. Rick will revise Ballot 89, and Ben said that he would discuss a revised ballot with Rick that could be to the effect that a “no” vote meant that the current version would be removed and a “yes” vote would mean that version 2 gets posted. Rick said that the pre-discussion period has been going on for two years. He’s going to start the official discussion period next week.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>5. Application of Firmaprofessional and Disig A.S.:</b> The group reviewed the applications of Firmaprofessional and Disig and noted that they appeared to qualify as CA members of the Forum. Ben suggested that Dean write to their representatives and acknowledge acceptance of their membership. <o:p></o:p></p><p class=MsoNormal><b>6. Definition of "rekey" and applicability of BRs to legacy certificates:</b> Wayne said that <span style='color:black'>there has been a lot of debate on the mailing list about this. There are two aspects to the issue – the conflict between contractual provisions and compliance with new requirements. He said that Robin had a good suggestion for dealing with the first aspect by requiring a contractual provision that subscribers must agree to if the Baseline Requirements change. Kirk said we are not a standards body and that enforcement depends on browsers. Ryan said that each CA that applies for inclusion in a root store is responsible for complying with the requirements and that whatever that CA is able to offer commercially is already constrained by what is allowed by the browser root programs--so at the end of the day, every CA needs to conform to industry standards. Eddy said that whatever we offer the customer is of course limited to what we can offer by being in the root store and he thought that most CAs have provisions that provide for this circumstance. Wayne said that there seems to be general agreement that there’s not a reason to not put Robin’s suggestion in Subscriber Agreements. Ryan said that the Subscriber Agreements should specifically reference that changes to the Baseline Requirements are foreseeable. Wayne asked whether someone would write a ballot. Ben said he and Jeremy would write something up. Kirk asked whether it would address the “rekey” issue, and Ben said we hadn’t fully discussed that yet. <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Wayne said the second aspect was the debate between rekey and reissue. Rick said we need to address how to handle certificates that were issued prior to adoption of the Baseline Requirements. Wayne noted that there were limited exceptions to the Baseline Requirements for certain cases and that he has proposed what he thinks is a workable solution to clarify what is allowed when a certificate was issued prior to adoption of the Baseline Requirements, and that a couple members have seconded the motion, but others have been strongly opposed. <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Wayne said that contractual obligations to issue long-term multi-domain certificates are impacted because they cannot be changed unless they fall into an allowed category. Eddy said his understanding is that when adding or removing host names, for example, if host name rules change, then you have to be compliant with the Baseline Requirements every time when you reissue. <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Wayne said that the ballot he is proposing has a very narrow in scope in that it only exempts a CA from the duration limitation of the Baseline Requirements and nothing else. Eddy said that he remembers a couple of years ago, when we were talking about the same issue that Wayne had agreed to the 60 months and that previously issued certificates would comply to that as well. Ryan said that even though the scope of the ballot is limited, there should still be more discussion about what this means for CA practices. If you are going to reissue a certificate, then all of the business implications must really be understood and agreed upon because different parties might have different ideas about what the ballot means. Wayne said the ballot will help define the scope of the Baseline Requirements and help us when we find these cases to address them and so he will put forth the ballot and hopefully get more discussion. <o:p></o:p></span></p><p class=MsoNormal style='line-height:normal'><b>7. Review status of website revisions:</b> Ben reviewed his tracking sheet and gave the following status report:<o:p></o:p></p><p class=MsoListParagraphCxSpFirst style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>He hasn’t been able yet to do a full review of the draft web site. <o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for Consumers - Dean worked on it most recently, but Simon was also asked to edit it.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for Website Owners - Robin was assigned to it, but it was last worked on by Ben in February.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for System Administrators - Mert was in charge of that one.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for Manufacturers and Developers - Rick worked on that on July 22nd.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for Potential CAs and Browser Members - Dean worked on that in July.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for Auditors – Iņigo, Don and Reema need to take a look at it.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Info for Press - Gerv worked on it. (The news articles doesn’t need much editing -- that’s in the “About” section.)<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Mission and Governance pages have been combined, as discussed during the F2F. <o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Bylaws page hasn’t been worked on since February – Ben will take a look.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Members page - Ryan Koski worked on that in February.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Leadership - Ryan K. worked on that, too, in February. <o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Mailing list – also needs a little work by Robin and Jeremy.<o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>IPR Policy page – Ben needs to do that still. <o:p></o:p></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Ben sent Connie a reminder on July 10th - she has been off on holiday and will get to it next week.<o:p></o:p></p><p class=MsoListParagraphCxSpLast style='text-indent:-.25in;line-height:normal;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]>Research statistics - Ryan Sleevi had put things up there in February. Ryan S. had also worked on several other pages in February. Don was going to look at it.<o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'>Ben will send out another reminder email to give the status of where things are and make the tracking sheet available for everyone’s review.<o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'>Wayne said that due to the passage of time after volunteering GoDaddy resources to modify the website, those resources are no longer available to him, and he will likely have problems in the next six months or so getting those resources. GoDaddy can continue hosting the site, but we need to select a WordPress template. Ben said he would put out a call for suggested Wordpress themes to use on the revised website.<o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'>Dean said that he would draft something for the current home page to announce/welcome new CABF members.<o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'><b>8. Other Business–Ankara Logistics:</b> Ben noted that the meetings would be held at Swissotel. Dean said the rate of around 100 Euros looked reasonable, but he also said that he thinks that Turktrust might be making the reservations and then we would pay with our own credit cards at check out. <o:p></o:p></p><p class=MsoNormal style='line-height:normal'><o:p> </o:p></p><p class=MsoNormal style='line-height:normal'><b>9. Meeting adjourned:</b> Next meeting is set for Thursday, August 22nd.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>