<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>See responses inline below- <o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><span style='color:#1F497D'>Erwann wrote: </span>Would such a definition allow RedHat, Debian, or any other Linux distribution to apply as a Platform provider?<span style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Ben: I don’t think that “any other” Linux distribution would qualify – only a “a major one” that also manages a root store and does more than simply import somebody else’s store “whole-cloth”. <o:p></o:p></span></p><p class=MsoNormal><br><span style='color:#1F497D'>Erwann wrote: </span>They usually take Mozilla's root store and redistribute it.<span style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Ben: If RedHat only takes the Mozilla root store, then it might not qualify, but I’ll leave the finer points on either side of that argument for debate among others in this group who are more familiar with RedHat. If they do take the entire whole of Mozilla’s store “as is” then should the definition be modified to more clearly include/exclude them? <o:p></o:p></span></p><p class=MsoNormal><br><span style='color:#1F497D'>Erwann wrote: </span>Debian/Ubuntu also adds some CA certificates, and modifies libnss to include them (2 for CACert and 1 for SPI), it has an effect on Mozilla and Chrome browsers.<span style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Ben: Same analysis as above – if Debian and Ubuntu were to meet those requirements under the proposed modification, then I think they would qualify, but I’m open to discussion.<o:p></o:p></span></p><p class=MsoNormal><br><br><o:p></o:p></p><pre>-- <o:p></o:p></pre><pre>Erwann ABALEA<o:p></o:p></pre><pre><o:p> </o:p></pre><p class=MsoNormal>Le 25/11/2013 06:44, Ben Wilson a écrit :<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoPlainText>What about this definition? I took out the word “global” and inserted language about managing a root store.<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>(3) Browser/Platform Provider: The member organization manages a root store as a major provider of a software product used by the general public: (a) to browse the Web securely or (b) to authenticate digitally signed code.<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>Redlined, if it comes through to you as HTML, as follows:<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-family:"Arial","sans-serif"'>(3) <u>Browser</u></span><u><span lang=EN style='font-family:"Arial","sans-serif";color:red'>/Platform Provider</span></u><span lang=EN style='font-family:"Arial","sans-serif"'>: The member organization </span><u><span lang=EN style='font-family:"Arial","sans-serif";color:red'>manages a root store as a major provider of </span></u><s><span lang=EN style='font-family:"Arial","sans-serif";color:red'>produces</span></s><u><span lang=EN style='font-family:"Arial","sans-serif";color:red'> </span></u><span lang=EN style='font-family:"Arial","sans-serif"'>a software product </span><s><span lang=EN style='font-family:"Arial","sans-serif";color:red'>intended for</span></s><span lang=EN style='font-family:"Arial","sans-serif"'> use</span><s><span lang=EN style='font-family:"Arial","sans-serif";color:red'>d</span></s><span lang=EN style='font-family:"Arial","sans-serif"'> by the general public </span><u><span lang=EN style='font-family:"Arial","sans-serif";color:red'>(a) to</span></u><span lang=EN style='font-family:"Arial","sans-serif";color:red'> <s>for</s> </span><span lang=EN style='font-family:"Arial","sans-serif"'>brows</span><u><span lang=EN style='font-family:"Arial","sans-serif";color:red'>e</span></u><s><span lang=EN style='font-family:"Arial","sans-serif";color:red'>ing</span></s><span lang=EN style='font-family:"Arial","sans-serif"'> the Web securely </span><u><span lang=EN style='font-family:"Arial","sans-serif";color:red'>or (b) to authenticate digitally signed code</span></u><span lang=EN style='font-family:"Arial","sans-serif"'>. </span><o:p></o:p></p><p class=MsoPlainText><span lang=EN> </span><o:p></o:p></p><p class=MsoPlainText><span lang=EN> </span><o:p></o:p></p><p class=MsoPlainText>-----Original Message-----<br>From: <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] On Behalf Of Gervase Markham<br>Sent: Wednesday, November 13, 2013 4:43 AM<br>To: <a href="mailto:ben@digicert.com">ben@digicert.com</a>; 'CABFPub'<br>Subject: Re: [cabfpub] Discussion Draft for Revisions to Bylaws<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>On 12/11/13 19:25, Ben Wilson wrote:<o:p></o:p></p><p class=MsoPlainText>> As you stated, an "influx of many small Android browsers" or any other <o:p></o:p></p><p class=MsoPlainText>> kind of numerous small browser developers. As stated in my email of <o:p></o:p></p><p class=MsoPlainText>> October 10 with references to past discussions, the size of the browser should be a<o:p></o:p></p><p class=MsoPlainText>> relevant consideration. Several producers of "a software product intended<o:p></o:p></p><p class=MsoPlainText>> for use by the general public to browse" or under the expanded group <o:p></o:p></p><p class=MsoPlainText>> of software "[that] authenticates digitally signed computer code" <o:p></o:p></p><p class=MsoPlainText>> dramatically shift the current conditions. I am acting as scribe, <o:p></o:p></p><p class=MsoPlainText>> more or less, to what I perceive is the concern of a majority of <o:p></o:p></p><p class=MsoPlainText>> members--I might be wrong, in which case we'd need to determine the sentiment of the group.<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>I notice Rick's document has moved to the concept of "Root Store Operator". Perhaps the right thing would be to try and come up with a definition of someone who manages, or ships popular software which makes significant policy or content changes to, a root store? That would include Mozilla, Google, Apple, Opera and Oracle, without including browser manufacturers who simply wrap Webkit and so have no effect on how the CA system works.<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>> That's fine. I started down that road before (and I did again after <o:p></o:p></p><p class=MsoPlainText>> the last meeting). I keep hitting a dead end because I must <o:p></o:p></p><p class=MsoPlainText>> incorporate by reference the IPR Policy, which many have complained is <o:p></o:p></p><p class=MsoPlainText>> not lightweight enough.<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>Why must you do so?<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>I thought the entire point of a lightweight IPR agreement was that it would not incorporate the existing policy by reference, but would instead say:<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>"Hi. If I have ownership of patents on anything I contribute, you can have full rights to them. And the copyright policy is fine, BTW. Ok, thanks, bye."<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>This would probably only be signed by individuals who did not and had no intention of holding patents. But a lot of our potential invited experts fall into that category.<o:p></o:p></p><p class=MsoPlainText> <o:p></o:p></p><p class=MsoPlainText>Gerv<o:p></o:p></p><p class=MsoPlainText>_______________________________________________<o:p></o:p></p><p class=MsoPlainText>Public mailing list<o:p></o:p></p><p class=MsoPlainText><a href="mailto:Public@cabforum.org"><span style='color:windowtext;text-decoration:none'>Public@cabforum.org</span></a><o:p></o:p></p><p class=MsoPlainText><a href="https://cabforum.org/mailman/listinfo/public"><span style='color:windowtext;text-decoration:none'>https://cabforum.org/mailman/listinfo/public</span></a><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br><br><br><o:p></o:p></span></p><pre>_______________________________________________<o:p></o:p></pre><pre>Public mailing list<o:p></o:p></pre><pre><a href="mailto:Public@cabforum.org">Public@cabforum.org</a><o:p></o:p></pre><pre><a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></pre></blockquote><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></body></html>