<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Ballontekst Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BallontekstChar
{mso-style-name:"Ballontekst Char";
mso-style-priority:99;
mso-style-link:Ballontekst;
font-family:"Tahoma","sans-serif";}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line867, li.line867, div.line867
{mso-style-name:line867;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.E-mailStijl22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.u
{mso-style-name:u;}
span.E-mailStijl24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-mailStijl25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-mailStijl26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-mailStijl27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
p.BalloonText, li.BalloonText, div.BalloonText
{mso-style-name:"Balloon Text";
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.E-mailStijl31
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="NL" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Logius PKIoverheid votes YES.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Robert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Ben Wilson<br>
<b>Sent:</b> 10. juli 2014 20:02<br>
<b>To:</b> <a href="mailto:public@cabforum.org">public@cabforum.org</a><br>
<b>Subject:</b> Re: [cabfpub] Ballot 127 - Verification of Agency in EVG 11.7.2<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="NO-BOK"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">This morning during our CABF call Cecilia mentioned that the cross-reference in this ballot needed to be changed, so here is an updated version of Ballot 127. Voting starts today at 2200 UTC.
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">Cecilia Kam of Symantec made the following motion and Jeremy Rowley of Digicert and Kirk Hall of Trend Micro have endorsed it:
<o:p></o:p></span></p>
<p class="line867"><strong><span lang="EN-US">Reasons for proposed ballot</span></strong><span lang="EN-US">
<o:p></o:p></span></p>
<p class="line867"><span lang="EN-US">The EV Guidelines currently allow verification of agency through the applicant's human resources department by calling an independently verified telephone number and verifying employment. This process does not always work
smoothly. Often employment verification is outsourced to a third party service provider, or HR person refuses to answer without taking specific procedural steps, and CA ends up asking to speak with IT department or managers within applicant's organization
in order to obtain the needed confirmation. <o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">The proponents of this ballot believe that the proposed modification to this method of confirmation (contacting others within the applicant's organization, in addition to HR) is sufficiently trustworthy. This would still
be performed by calling the applicant, at its publicly recognized phone number, and verifying employment of the applicant representative (Contract Signer or Certificate Approver) with someone other than the individual about whom the information is sought.
<o:p></o:p></span></p>
<p class="line867"><strong><span lang="EN-US">---MOTION BEGINS---</span></strong><span lang="EN-US">
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">Subsection (2)(A) of section 11.7.2 of the Extended Validation Guidelines (Acceptable Methods of Verification - Name, Title and Agency) would be amended as follows:
<o:p></o:p></span></p>
<p class="line867"><strong><span lang="EN-US">(2) Agency: </span></strong><span lang="EN-US">The CA MAY verify the agency of the Contract Signer and the Certificate Approver by:
<o:p></o:p></span></p>
<p class="line867"><span lang="EN-US">(A) Contacting the Applicant<strong>[STRIKE--'s Human Resources Department]</strong> by phone or mail<b>[INSERT</b>
<b>,]</b> <b>[STIKE (]</b>at the phone number or address for the Applicant<strong>[STRIKE--'s Place of Business,]</strong>
<b>[INSERT--</b><span class="u">obtained and<b>]</b></span> verified in accordance with<strong> [STRIKE--these Guidelines)]</strong>
<b>[INSERT—Section 11.4.1 or 11.4.2,] </b>and obtaining confirmation that the Contract Signer and/or the Certificate Approver, as applicable, is an employee; or
<br>
. . . <o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">The resulting subsection 11.7.2(2) would read as follows:
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">(2) Agency: The CA MAY verify the agency of the Contract Signer and the Certificate Approver by:
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">(A) Contacting the Applicant by phone or mail, at the phone number or address for the Applicant, obtained and verified in accordance with Section 11.4.1 or 11.4.2, and obtaining confirmation that the Contract Signer and/or
the Certificate Approver, as applicable, is an employee; or <o:p></o:p></span></p>
<p class="line867"><strong><span lang="EN-US">---MOTION ENDS---</span></strong><span lang="EN-US">
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">The review period for this ballot shall commence at 2200 UTC on Thursday, July 3, 2014, and will close at 2200 UTC on Thursday, July 10, 2014.
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2200 UTC on Thursday, July 17, 2014. Votes must be cast by posting an on-list reply to this
thread. <o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">A vote in favor of the motion must indicate a clear 'yes' in the response.
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">A vote against must indicate a clear 'no' in the response.
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted.
<o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">The latest vote received from any representative of a voting member before the close of the voting period will be counted.
<o:p></o:p></span></p>
<p class="line862"><span lang="EN-US">Voting members are listed here: <a href="https://cabforum.org/members/">
<span style="color:windowtext">https://cabforum.org/members/</span></a> <o:p></o:p></span></p>
<p class="line874"><span lang="EN-US">In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and more than one half of the votes cast by members in the browser category must be in favor. Quorum is currently
six (6) members– at least six members must participate in the ballot, either by voting in favor, voting against, or by abstaining for the vote to be valid.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid
voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.<br>
This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind
resulting from the risks inherent in the electronic transmission of messages. .<br>
</font>
</body>
</html>