<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-9">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:10.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:115%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:115%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:115%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:10.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:115%;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
p.line867, li.line867, div.line867
{mso-style-name:line867;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.Textodeglobo, li.Textodeglobo, div.Textodeglobo
{mso-style-name:"Texto de globo";
mso-style-link:"Texto de globo Car";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:windowtext">Thanks, Iñigo. As I read it, the EU regulation below does *<b>not</b>* require a CA to maintain insurance. Instead, it establishes the levels at which the CA may be liable to other people, so that the CA
can then evaluate the risk and decide whether or not to obtain insurance.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:windowtext">That’s the right way to do it. And the EVGL already does that – we define what warranties and liabilities a CA should have to customers and relying parties, and we do not allow a CA to disclaim all risk.
Whether or not a CA wants to try to cover some or all of that potential risk is up to the CA. CGL and E&O insurance will not accomplish that.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>i-barreira@izenpe.net<br>
<b>Sent:</b> Monday, May 05, 2014 12:21 AM<br>
<b>To:</b> atilla.biler@turktrust.com.tr; public@cabforum.org<br>
<b>Cc:</b> management@cabforum.org<br>
<b>Subject:</b> Re: [cabfpub] [cabfman] Ballot 121 - EVGL Insurance Requirements<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="ES" style="color:#1F497D">Izenpe votes YES<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I´ve read all comments and I think that a rewording may be needed to avoid that a CA does not have an insurance because of any reasons, but I also think (from the beginning) that this had to be changed time ago
and adapt to what is intended as Eddy pointed out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">As for clarifying (or not) here´s what the new EU regulation says on “insurance”:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><i>This Regulation provides for the liability of all trust service providers. In particular, it establishes the liability regime under which all trust service providers should be liable for damage caused to any natural or legal person
due to failure to comply with the obligations under this Regulation. In order to facilitate the assessment of financial risk that trust service providers might have to bear or that they should cover by insurance policies, this Regulation allows trust service
providers to set limitations, under certain conditions, on the use of the services they provide and not to be liable for damages arising from the use of services exceeding such limitations. Customers should be duly informed about the limitations in advance.
Those limitations should be recognisable by a third party, e.g. by including information thereabout in the terms and conditions of the service provided or through other recognisable means. For the purposes of giving effect to these principles, this Regulation
should be applied in accordance with national rules on liability. Therefore, this Regulation does not affect those rules, for example, on definition of damages, intention, negligence, on relevant applicable procedural rules<o:p></o:p></i></b></p>
<p class="MsoNormal"><b><i><o:p> </o:p></i></b></p>
<p class="MsoNormal"><b><i><o:p> </o:p></i></b></p>
<p class="MsoNormal"><span style="color:#1F497D">And article 24 on Requirements for qualified trust service providers says:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><a name="_DV_C768"><b><i>with regard to</i></b></a><a name="_DV_M651"></a> the risk of liability for damages
<a name="_DV_C770"><b><i>in accordance with Article 13, maintain</i></b></a><a name="_DV_M652"></a> sufficient financial resources
<a name="_DV_C771"><b><i>and/</i></b></a><a name="_DV_M653"></a>or <a name="_DV_C773">
<b><i>obtain</i></b></a><b><i> </i></b><a name="_DV_C775">appropriate liability insurance<b><i>, in accordance with national law</i></b></a><a name="_DV_M656"></a>;<span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><i><o:p> </o:p></i></b></p>
<p class="MsoNormal"><span style="color:#1F497D">Regards<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:9.75pt"><b><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"">Iñigo Barreira</span></b><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif""><br>
Responsable del Área técnica<br>
<a href="mailto:i-barreira@izenpe.net">i-barreira@izenpe.net</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"">945067705</span><span lang="ES-TRAD" style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="ES" style="color:#1F497D"><img border="0" width="585" height="111" id="Imagen_x0020_1" src="cid:image001.png@01CF6872.9A43AA80" alt="Descripción: cid:image001.png@01CE3152.B4804EB0"></span><span lang="ES-TRAD" style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:9.75pt"><span lang="ES" style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD">ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere
hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span lang="ES" style="color:#888888;mso-fareast-language:ES-TRAD"><br>
</span><span lang="ES" style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD">ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted
lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span lang="ES" style="font-size:12.0pt;color:navy;mso-fareast-language:ES-TRAD"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="ES" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">De:</span></b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> management-bounces@cabforum.org [mailto:management-bounces@cabforum.org]
<b>En nombre de </b>N. ATILLA BILER<br>
<b>Enviado el:</b> viernes, 02 de mayo de 2014 13:40<br>
<b>Para:</b> public@cabforum.org<br>
<b>CC:</b> CAB Forum Man<br>
<b>Asunto:</b> Re: [cabfman] [cabfpub] Ballot 121 - EVGL Insurance Requirements<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Hi all,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Just to restate what I said yesterday, there may be a need for rewording the ballot that will put clear alternatives for the current insurance scheme or more internationally applicable insurance requirements
may be proposed under the current scheme. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Otherwise, simply accepting this ballot will cause ambiguity, whereas totally rejecting this ballot and ignoring the difficulties of the insurance requirements (in terms of local jurisdiction and insurance legislation
of different countries) will sustain applicability problems.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">For now, our vote is YES as Imren stated in her message below…<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="TR" style="color:#1F497D">N. Atilla BILER<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span lang="TR" style="color:#1F497D">Business Development Manager<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span lang="TR" style="color:#1F497D">TURKTRUST Inc.<o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">Address: Hollanda Cad. 696.Sok. No:7 Yildiz 06550 Cankaya / ANKARA - TURKEY<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">Phone : +90 (312) 439 10 00<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">Mobile : +90 (530) 314 24 05<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">Fax : +90 (312) 439 10 01<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">E-mail : <a href="mailto:atilla.biler@turktrust.com.tr">
<span style="color:#1F497D">atilla.biler@turktrust.com.tr</span></a> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">Web : <a href="http://www.turktrust.com.tr/">
<span style="color:#1F497D">www.turktrust.com.tr</span></a> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> Ýmren Altepe [mailto:imren.altepe@turktrust.com.tr]
<br>
<b>Sent:</b> Friday, May 02, 2014 12:13 PM<br>
<b>To:</b> public@cabforum.org<br>
<b>Subject:</b> RE: [cabfpub] Ballot 121 - EVGL Insurance Requirements<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="TR"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D">TURKTRUST votes YES.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="TR" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="TR" style="color:windowtext">From:</span></b><span lang="TR" style="color:windowtext">
<a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Ben Wilson<br>
<b>Sent:</b> Thursday, April 24, 2014 3:17 AM<br>
<b>To:</b> <a href="mailto:public@cabforum.org">public@cabforum.org</a><br>
<b>Subject:</b> [cabfpub] Ballot 121 - EVGL Insurance Requirements<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="TR"><o:p> </o:p></span></p>
<p class="line867" style="margin:0in;margin-bottom:.0001pt"><strong><span lang="EN" style="font-family:"Arial","sans-serif";color:black">Ballot 121 – EVGL Insurance Requirements</span></strong><span lang="EN" style="font-family:"Arial","sans-serif";color:black">
<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:14.65pt;background:white"><span lang="EN" style="font-size:12.0pt;font-family:"Arial","sans-serif";color:windowtext">The EV Guidelines Working Group is considering updating the EV Guidelines in a number of areas. Kirk
Hall of Trend Micro hereby makes the following motion, and Moudrick Dadashov from
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif";color:windowtext;border:none windowtext 1.0pt;padding:0in">Skaitmeninio sertifikavimo centras (SSC)</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif";color:windowtext">
</span><span lang="EN" style="font-size:12.0pt;font-family:"Arial","sans-serif";color:windowtext">and Richard Wang from WoSign have endorsed it.
<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial","sans-serif"">This ballot is to amend the current EV Guidelines (EVGL) Sec. 8.4 requirements as stated below.
</span><span lang="EN" style="font-family:"Arial","sans-serif";color:black">The reasons in favor of the Ballot are stated after the proposed amendments.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><u><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Motion begins</span></u><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">:<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Amend EV Guideline Section 8.4 to read as follows:<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><b><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">EV Guideline Section 8.4 - Insurance<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><b><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></b></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Each CA SHALL maintain
<s>the following</s> insurance related to <s>their</s> <b><u>its</u></b> respective performance and obligations under these Guidelines
<b><u>in accordance with the the minimum insurance requirements (if any) as are applicable to the CA under the law of its jurisdiction of incorporation or registration.</u></b>
<s>:<o:p></o:p></s></span></p>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in;text-autospace:none"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">(A) Commercial General Liability insurance (occurrence form) with policy limits of at least two million US dollars in coverage;
and<o:p></o:p></span></s></p>
<p class="MsoNormal" style="margin-left:1.0in;text-autospace:none"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p><span style="text-decoration:none"> </span></o:p></span></s></p>
<p class="MsoNormal" style="margin-left:1.0in;text-autospace:none"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">(B) Professional Liability/Errors and Omissions insurance, with policy limits of at least five million US dollars in coverage,
and including coverage for (i) claims for damages arising out of an act, error, or omission, unintentional breach of contract, or neglect in issuing or maintaining EV Certificates, and (ii) claims for damages arising out of infringement of the proprietary
rights of any third party (excluding copyright, and trademark infringement), and invasion of privacy and advertising injury.<o:p></o:p></span></s></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p><span style="text-decoration:none"> </span></o:p></span></s></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Such insurance MUST be with a company rated no less than A- as to Policy Holder’s Rating in the current edition of Best’s Insurance
Guide (or with an association of companies each of the members of which are so rated).<o:p></o:p></span></s></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p><span style="text-decoration:none"> </span></o:p></span></s></p>
<p class="MsoNormal" style="margin-left:.5in"><s><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">A CA MAY self-insure for liabilities that arise from such party's performance and obligations under these Guidelines provided that it has at least
five hundred million US dollars in liquid assets based on audited financial statements in the past twelve months, and a quick ratio (ratio of liquid assets to current liabilities) of not less than 1.0.<o:p></o:p></span></s></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><u><span lang="EN" style="font-family:"Arial","sans-serif";color:black">Motion Ends
<o:p></o:p></span></u></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">The reasons for this proposed amendment are as follows:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">The insurance requirements were created basically out of thin air during initial drafting of the EVGL, without any particular analysis of claims against CAs, usefulness of insurance, availability
of appropriate insurance, or necessary insurance levels. The main purpose of an insurance requirement in the EVGL was to impress the public with the responsibility of CAs who issue EV certificates. However, as noted below, these reasons aren’t really justified
by the facts.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">The types and amounts of insurance required under EVGL 8.4 are North America-centric, and are not easily available in other world regions (or not available at all). Insurance for damages
“arising out of infringement of the proprietary rights of any third party” are generally not available in many professional liability/errors and omissions policies. The requirement is arguably unfair to CAs outside North America.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">The types of insurance required under EVGL 8.4 are not designed to provide relief or compensation to injured customers or the public who rely on EV certs issued by a CA. Both types of insurance
are intended primarily to protect the issuing CA, not injured claimants, and the insurers will try to avoid or defeat all claims from claimants. The policies typically include defense costs within the policy limits, so an insurance policy might be entirely
consumed by defense costs to protect the issuing CA, with nothing left to pay claims to claimants.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraphCxSpFirst" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Commercial General Liability insurance doesn’t really help customers or relying parties who claim injury from a bad cert – these policies are more designed to protect the CA from things
like people falling on a slippery floor in the CA’s offices, etc. Likewise, professional liability/E&O coverage will only pay after defending the CA if a judgment is likely or rendered, and the insurer may try to avoid coverage if the issuing CA has done
some bad things. For example, Diginotar’s insurer has denied all coverage because Diginotar hid its breach and failed to report the problem for several weeks, compounding the damages and violating its obligations to the insurers – so the insurance was worthless.
These policies also do not cover contract claims from customers (e.g., a claim of breach of contract by the CA such as failure to issue a proper cert).<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle"><span style="font-size:12.0pt;line-height:115%;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraphCxSpLast" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Some have suggested that even if the current insurance requirements don’t actually protect the public or customers, they are nevertheless useful as a “show of seriousness” by a CA. If that
is a worthwhile objective, we may as well require other irrelevant things instead like proof of auto insurance or a minimum office space size – none of these qualifications are really relevant to whether a CA operates competently and in compliance with requirements.
Instead, we rely mostly on (1) annual performance audits, and (2) browser root programs (and consequences of failure) to confirm competence and compliance.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">VeriSign’s previous general counsel for ten years has said VeriSign never faced a claim for damages from any certs during that time. In most cases, bad certs are simply revoked and possibly
reissued.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Even though there have been virtually no claims against issuing CAs, buying the minimum insurance can be expensive for smaller CAs. There is typically a minimum premium of $25,000 or more
per year with a significant deductible, even though the CA will likely never have a covered claim. That’s a waste of money.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">In the Diginotar case, apparently claims were made against the company’s insurers (perhaps from investors for loss of value of the company when it was shut down). In any case, Diginotar’s
insurer denied all coverage for the claims based on Diginotar’s bad acts and breach of its obligations to the insurer. There would be no possibly insurance coverage for customers or relying parties, so the insurance was of no value.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Some countries have their own minimum insurance requirements for companies incorporated or registered in their jurisdiction, while many do not. The CA/Browser Forum should defer to these
decisions by the governing jurisdictions and require compliance with local standards – or just delete Section 8.4 entirely, as every CA must already comply with applicable laws.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal">
<span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">Finally, under current EVGL Sec. 8.4, large companies like Trend Micro get to opt out of the insurance requirements because they meet the stated financial requirements. This is arguably
an unfair advantage for large companies over small ones.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black">The review period for this ballot shall commence at 2200 UTC on Wednesday, 23 April 2014, and will close at 2200 UTC on Wednesday,
30 April 2014. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2200 UTC on Wednesday, 7 May 2014. Votes must be cast by posting an on-list reply to this thread.
<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black">A vote in favor of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response.
A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted. Voting members are listed here:
</span><a href="https://cabforum.org/members/"><span lang="EN" style="font-family:"Arial","sans-serif"">https://cabforum.org/members/</span></a><span style="font-family:"Arial","sans-serif";color:black">
</span><span lang="EN" style="font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt"><span lang="EN" style="font-family:"Arial","sans-serif";color:black">In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and greater than 50% of
the votes cast by members in the browser category must be in favor. Also, at least six members must participate in the ballot, either by voting in favor, voting against, or abstaining.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
</div>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre><table class="TM_EMAIL_NOTICE"><tr><td><pre>
TREND MICRO EMAIL NOTICE
The information contained in this email and any attachments is confidential
and may be subject to copyright or other intellectual property protection.
If you are not the intended recipient, you are not authorized to use or
disclose this information, and we request that you notify us by reply mail or
telephone and delete the original message from your mail system.
</pre></td></tr></table></pre></font></td></tr></table>