<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0cm;
margin-right:0cm;
margin-bottom:8.0pt;
margin-left:0cm;
font-size:10.0pt;
font-family:"Cambria","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=FR link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif";color:windowtext;mso-fareast-language:EN-US'>OpenTrust votes Yes.<o:p></o:p></span></p><div><p class=MsoNormal style='margin-bottom:0cm;margin-bottom:.0001pt'><span style='font-family:"Arial","sans-serif";color:windowtext'>Kind regards.</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0cm;margin-bottom:.0001pt'><span style='font-family:"Arial","sans-serif";color:windowtext'> </span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-family:"Arial","sans-serif";color:windowtext'>Remi.</span><span style='font-family:"Arial","sans-serif";color:windowtext;mso-fareast-language:EN-US'><o:p></o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='margin-bottom:0cm;margin-bottom:.0001pt'><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'>De :</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext'> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] <b>De la part de</b> Ben Wilson<br><b>Envoyé :</b> jeudi 4 septembre 2014 19:50<br><b>À :</b> 'public@cabforum.org'<br><b>Objet :</b> Re: [cabfpub] Ballot 131 - Update to Verified Method of Communication<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>All,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Mads Henriksveen of Buypass has identified a mistake in the language of Ballot 131. Apparently the drafters only intended to replace references to telephone number/mailing address in sections 11.8.2, 11.9.2 and 11.10.2 (and not those entire sections). The believe that everyone who voted in favor thus far had that same understanding about this ballot, so they have asked me to update the ballot based on this correction and to republish the redlined version. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I’d like everyone to re-vote on Ballot 131 with the following three changes in mind, and I’ll hold Ballot 131 open for an additional few days. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Sections 9, 10, and 11 should have read: <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>9. REPLACE newly renumbered subsection 11.8.2(2)(A) with " (A) Contacting the Applicant using a Verified Method of Communication for the Applicant, and obtaining confirmation that the Contract Signer and/or the Certificate Approver, as applicable, is an employee; or”<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>10. REPLACE newly renumbered subsection 11.9.2(1) with "A letter mailed to the Applicant’s or Agent’s address, as verified through independent means in accordance with these Guidelines, for the attention of the Certificate Requester or Contract Signer, as applicable, followed by a response through a Verified Method of Communication from someone who identifies themselves as such person confirming that he/she did sign the applicable document on behalf of the Applicant”<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>11. REPLACE newly renumbered subsection 11.10.2 (1) with "Contacting the Certificate Approver using a Verified Method of Communication for the Applicant and obtaining oral or written confirmation that the Certificate Approver has reviewed and approved the EV Certificate Request;”<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>The previous redlined version also didn’t include changes under paragraph 6 of the ballot for section 11.11.4(1)(A)(i). See the attached redlined version which should have all of those changes marked as intended, along with the punctuation consistency for sections 11.8.2, 11.9.2, and 11.10.2, as recommended by Wayne.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Ben<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='margin-bottom:0cm;margin-bottom:.0001pt'><b><span lang=EN-US style='font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span lang=EN-US style='font-family:"Tahoma","sans-serif";color:windowtext'> <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Jeremy Rowley<br><b>Sent:</b> Friday, August 22, 2014 10:51 AM<br><b>To:</b> 'public@cabforum.org'<br><b>Subject:</b> [cabfpub] Ballot 131 - Update to Verified Method of Communication<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>Hi everyone, <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>The following is a revised ballot for verifying a method of communication from the EV working group. The changes in this ballot incorporate the comments provide during the face-to-face and on the mailing list. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>Jeremy<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>------------------ <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>Ballot 131 - Update to Verified Method of Communication<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>The EV Guidelines Working Group has revisited Section 11.4 of the EV Guidelines (Applicant’s Physical Existence) and has decided that it is best to split it into two separate sections. Section 11.4.1 would remain as is for "Address of Applicant’s Place of Business." Section 11.4.2 would be moved to its own section--a new 11.5, and all subsequent section numbers in 11 would be renumbered accordingly. The new Section 11.5 will focus on a verified means for communicating with the organization to be named as the subject in the certificate (to verify the authority of EV roles and ensure that it was appropriately aware of the certificate request).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>Cecilia Kam of Symantec made the following motion, and Rich Smith from Comodo and Jeremy Rowley from DigiCert have endorsed it.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'><o:p> </o:p></span></p><div style='border:none;border-bottom:solid windowtext 1.0pt;padding:0cm 0cm 1.0pt 0cm'><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>Motion Begins <o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>In the Guidelines for the Issuance and Management of Extended Validation Certificates:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>1. DELETE Section 11.4.2 (Telephone Number for Applicant's Place of Business)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>2. INSERT a new definition - "Verified Method of Communication" - in Section 4 as follows:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>Verified Method of Communication: The use of a telephone number, a fax number, an email address, or a postal delivery address, confirmed by the CA in accordance with Section 11.5 of the Guidelines as a reliable way of communicating with the Applicant.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>3. In Section 11.11.1, renumber the existing subsection (3) as subsection (4) and INSERT a new subsection (3) as follows:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>"(3) Verify a reliable means of communication with the entity to be named as the Subject in the Certificate;" <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>4. RENUMBER sections 11.5 through 11.13 by increasing them each by .1 and UPDATE all cross-references in the EV Guidelines.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>5. INSERT a new Section 11.5 titled, "Verified Method of Communication" as follows:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>11.5 Verified Method of Communication <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>11.5.1 Verification Requirements<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>To assist in communicating with the Applicant and confirming that the Applicant is aware of and approves issuance, the CA MUST verify a telephone number, fax number, email address, or postal delivery address as a Verified Method of Communication with the Applicant.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>11.5.2 Acceptable Methods of Verification<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>To verify a Verified Method of Communication with the Applicant, the CA MUST: <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>(A) Verify that the Verified Method of Communication belongs to the Applicant, or a Parent/Subsidiary or Affiliate of the Applicant, by matching it with one of the Applicant’s Parent/Subsidiary or Affiliate’s Places of Business in: (i) records provided by the applicable phone company; (ii) a QGIS, QTIS, or QIIS; or (iii) a Verified Legal Opinion or Verified Accountant Letter; and <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>(B) Confirm the Verified Method of Communication by using it to obtain an affirmative response sufficient to enable a reasonable person to conclude that the Applicant, or a Parent/Subsidiary or Affiliate of Applicant, can be contacted reliably by using the Verified Method of Communication. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>6. Amend newly renumbered subsection 11.11.4(1)(A)(i) as follows: "A position within the Applicant’s organization that qualifies as a Confirming Person (e.g., Secretary, President, CEO, CFO, COO, CIO, CSO, Director, etc.) and is identified by name and title in a current QGIS, QIIS, QTIS, Verified Legal Opinion, Verified Accountant Letter, or by contacting the Applicant’s using a Verified Method of Communication; or"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>7. REPLACE newly renumbered subsection 11.14.1(1) (D) with "(D) Verified Method of Communication – thirteen months " <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>8. REPLACE newly renumbered subsection 11.14.3(1)(C) with "The Verified Method of Communication required by Section 11.4.2 but still MUST perform the verification required by Section 11.4.2(2)(B);" <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>9. REPLACE newly renumbered subsection 11.8.2(2)(A) with "The Verified Method of Communication"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>10. REPLACE newly renumbered subsection 11.9.2(1) with "The Verified Method of Communication"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'>11. REPLACE newly renumbered subsection 11.10.2 (1) with "The Verified Method of Communication"<o:p></o:p></span></p><div style='border:none;border-bottom:solid windowtext 1.0pt;padding:0cm 0cm 1.0pt 0cm'><p class=line874><span lang=EN-US style='font-size:11.0pt;font-family:"Cambria","serif"'>Motion Ends <o:p></o:p></span></p></div><p class=line874><span lang=EN-US style='font-size:11.0pt;font-family:"Cambria","serif"'>The review period for this ballot shall commence at 2200 UTC on Friday, 22 August 2014, and will close at 2200 UTC on Friday, 29 August 2014. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2200 UTC on Friday, 5 September 2014. Votes must be cast by posting an on-list reply to this thread. <o:p></o:p></span></p><p class=line862><span lang=EN-US style='font-size:11.0pt;font-family:"Cambria","serif"'>A vote in favor of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted. Voting members are listed here: <a href="https://cabforum.org/members/">https://cabforum.org/members/</a> <o:p></o:p></span></p><p class=line874><span lang=EN-US style='font-size:11.0pt;font-family:"Cambria","serif"'>In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor. Also, at least seven members must participate in the ballot, either by voting in favor, voting against, or abstaining. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;color:windowtext'><o:p> </o:p></span></p></div></body></html>