<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Trustis votes YES.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>Jeremy Rowley<br>
<b>Sent:</b> 08 January 2014 19:18<br>
<b>To:</b> public@cabforum.org<br>
<b>Subject:</b> Re: [cabfpub] Ballot 113 - Revision to QIIS in EV Guidelines<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Just as a reminder – the voting for this ends Monday. Be sure to vote.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Ben Wilson<br>
<b>Sent:</b> Monday, December 30, 2013 4:47 PM<br>
<b>To:</b> <a href="mailto:public@cabforum.org">public@cabforum.org</a><br>
<b>Subject:</b> [cabfpub] Ballot 113 - Revision to QIIS in EV Guidelines<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Ballot 113 - Revision to QIIS in EV Guidelines
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The following proposal comes from EV working group. Jeremy Rowley made the following motion, and Rich Smith and Kirk Hall have endorsed it.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">This ballot proposes a replacement to Section 11.10.5 of the Extended Validation Guidelines, which defines the qualifications of a QIIS. The previous QIIS definition did not accurately capture current CA practices. In
fact, a strict reading of the existing definition might imply that CAs were prohibited from using Dun & Bradstreet, Hoovers, and other commercially reliable sources generally regarded as accurate sources of information. The proposed definition consolidates
confusing and overlapping requirements while clarifying the QIIS verification requirements for CAs. The new definition permits CAs to use databases of information if the CA has documented its process to verify the data’s accuracy and the CA knows the information
is not self-reported. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">--- Motion begins ---<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Effective immediately:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Replace Section 11.10.5 in the EV Guidelines:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">11.10.5 Qualified Independent Information Source<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A Qualified Independent Information Source (QIIS) is a regularly-updated and current, publicly available, database designed for the purpose of accurately providing the information for which it is consulted, and which
is generally recognized as a dependable source of such information. A commercial database is a QIIS if the following are true:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(1) Industry groups rely on the database for providing accurate location or contact information;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(2) The database distinguishes between self-reported data and data reported by independent information sources;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(3) The database provider identifies how frequently they update the information in their database;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(4) Changes in the data that will be relied upon will be reflected in the database in no more than 12 months; and<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(5) The database provider uses authoritative sources independent of the Subject, or multiple corroborated sources, to which the data pertains.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Databases in which the CA or its owners or affiliated companies maintain a controlling interest, or in which any Registration Authorities or subcontractors to whom the CA has outsourced any portion of the vetting process
(or their owners or affiliated companies) maintain any ownership or beneficial interest do not qualify as a QIIS. The CA MUST check the accuracy of the database and ensure its data is acceptable.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">With the following proposed language for Section 11.10.5:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">11.10.5 Qualified Independent Information Source<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A Qualified Independent Information Source (QIIS) is a regularly updated and publicly available database that is generally recognized as a dependable and accurate source for certain information.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A database qualifies as a QIIS if the CA determines that:
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(1) Industries other than the certificate industry rely on the database for accurate location, contact, or other information; and<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(2) The database provider updates its data on at least an annual basis.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The CA SHALL use a documented process to check the accuracy of the database and ensure its data is acceptable, including reviewing the database provider’s terms of use.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The CA SHALL NOT use any data in a QIIS that the CA knows is (i) self-reported and (ii) not verified by the QIIS as accurate.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Databases in which the CA or its owners or affiliated companies maintain a controlling interest, or in which any Registration Authorities or subcontractors to whom the CA has outsourced any portion of the vetting process
(or their owners or affiliated companies) maintain any ownership or beneficial interest, do not qualify as a QIIS.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">--- Motion ends ---<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The review period for this ballot shall commence immediately at 2300 UTC on 30 December 2013 and will close on 6 January 2014.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2300 UTC on 13 January 2014.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Votes must be cast by posting an on-list reply to this thread.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A vote in favor of the ballot must indicate a clear ‘yes’ in the response.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A vote against the ballot must indicate a clear ‘no’ in the response.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A vote to abstain must indicate a clear ‘abstain’ in the response.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Unclear responses will not be counted.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The latest vote received from any representative of a voting member before the close of the voting period will be counted.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Voting members are listed here: <a href="https://cabforum.org/members/">
https://cabforum.org/members/</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and more than one half of the votes cast by members in the browser category must be in favor.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Quorum is currently six (6) members– at least six members must participate in the ballot, either by voting in favor, voting against, or by abstaining for the vote to be valid.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>