<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
On 09/05/2013 07:57 PM, From Bruce Morton:
<blockquote
cite="mid:452C99D20750E74083DBA441FF9323857CA1A200@SOTTEXCH10.corp.ad.entrust.com"
type="cite">
<pre wrap="">The ballot requires for Subscriber Certificates that the optional OID of basicConstraints be set to critical. I'm not sure why this optional OID needs to be set at critical, but if it does then some CAs will have to make a change. As such, I do not believe that the ballot should be "EFFECTIVE IMMEDIATELY."
</pre>
</blockquote>
<br>
Yes, I agree with Bruce here on both points. As such I think we
should be very careful with those "effective immediately" ballots as
they could easily jolt the boat of too many CAs and should only be
applied when necessary. In such a case I also believe that it would
be the CAB Forums responsibility to make a reasonable effort to
reach out to all CAs which really should be left for emergencies.<br>
<br>
And I'd like to repeat the question why the basicConstraints OID
needs to be set as critical for a Subscriber Certificate<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>