<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=big5"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@新細明體";
panose-1:2 2 5 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"註解方塊文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.a
{mso-style-name:"註解方塊文字 字元";
mso-style-priority:99;
mso-style-link:註解方塊文字;
font-family:"Cambria","serif";}
p.line867, li.line867, div.line867
{mso-style-name:line867;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.z-TopofFormChar
{mso-style-name:"z-Top of Form Char";
mso-style-priority:99;
mso-style-link:"z-Top of Form";
font-family:"Arial","sans-serif";
display:none;}
p.z-TopofForm, li.z-TopofForm, div.z-TopofForm
{mso-style-name:"z-Top of Form";
mso-style-link:"z-Top of Form Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.z-BottomofFormChar
{mso-style-name:"z-Bottom of Form Char";
mso-style-priority:99;
mso-style-link:"z-Bottom of Form";
font-family:"Arial","sans-serif";
display:none;}
p.z-BottomofForm, li.z-BottomofForm, div.z-BottomofForm
{mso-style-name:"z-Bottom of Form";
mso-style-link:"z-Bottom of Form Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.BalloonText, li.BalloonText, div.BalloonText
{mso-style-name:"Balloon Text";
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.a0, li.a0, div.a0
{mso-style-name:吹\304D出\3057;
mso-style-link:"吹\304D出\3057 \(文字\)";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.a1
{mso-style-name:"吹\304D出\3057 \(文字\)";
mso-style-priority:99;
mso-style-link:吹\304D出\3057;
font-family:"Arial","sans-serif";}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle31
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:#1F497D;}
span.EmailStyle33
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-TW link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='color:blue'><a href="http://epki.com.tw/"><span style='text-decoration:none'>Chunghwa Telecom Co., Ltd.</span></a> votes YES.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:blue'>Sincerely Yours,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:blue'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:blue'> Li-Chun CHEN<o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'>Engineer<o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'>CISSP, CISA, CISM, PMP,<o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'>Government Network Service Dept.<o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'>Data <a name="OLE_LINK1">Communication</a> Business Group<o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'>Chunghwa Telecom Co. Ltd.<o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'><a href="mailto:realsky@cht.com.tw"><span style='text-decoration:none'>realsky@cht.com.tw</span></a><o:p></o:p></span></p><p class=MsoNormal style='text-indent:78.0pt'><span lang=EN-US style='color:blue'>+886-2-2344-4820#4025<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:JA'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:JA'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:JA'> <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Ben Wilson<br><b>Sent:</b> Wednesday, October 01, 2014 3:01 AM<br><b>To:</b> CABFPub<br><b>Subject:</b> [cabfpub] Ballot 125 - CAA Records<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:JA'><o:p> </o:p></span></p><p class=line874><a name=texteditlink><strong><span lang=EN-US style='mso-fareast-language:JA'>Ballot 125 - CAA Records</span></strong></a><span lang=EN style='mso-fareast-language:JA'><o:p></o:p></span></p><p class=line874><span lang=EN style='mso-fareast-language:JA'>Rick Andrews of Symantec made the following motion and Jeremy Rowley of Digicert and Ryan Sleevi of Google have endorsed it: <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>Reasons for proposed ballot</span></strong><span lang=EN style='mso-fareast-language:JA'> RFC 6844 defines a Certification Authority Authorization DNS Resource Record (CAA). A CAA allows a DNS domain name holder to specify the CAs authorized to issue certificates for that domain. Publication of the CAA gives CAs and domain holders additional controls to reduce the risk of unintended certificate mis-issuance. <o:p></o:p></span></p><p class=line874><span lang=EN style='mso-fareast-language:JA'>The proponents of this ballot believe that this proposed modification to the Baseline Requirements, which gives CAs up to six months to update their CP and/or CPS to state the degree to which they implement CAA, provides all CAs with the flexibility needed to begin implementation of CAA. <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>---MOTION BEGINS---</span></strong><span lang=EN style='mso-fareast-language:JA'> <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>Add to Section 4 Definitions, new item:</span></strong><span lang=EN style='mso-fareast-language:JA'> <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>CAA:</span></strong><span lang=EN style='mso-fareast-language:JA'> From RFC 6844 (</span><span lang=EN-US style='mso-fareast-language:JA'><a href="http://tools.ietf.org/html/rfc6844"><span lang=EN>http:tools.ietf.org/html/rfc6844</span></a></span><span lang=EN style='mso-fareast-language:JA'>): “The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify the Certification Authorities (CAs) authorized to issue certificates for that domain. Publication of CAA Resource Records allows a public Certification Authority to implement additional controls to reduce the risk of unintended certificate mis-issue.” <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>Add the following to the end of Section 8.2.2, Disclosure:</span></strong><span lang=EN style='mso-fareast-language:JA'> <o:p></o:p></span></p><p class=line874><span lang=EN style='mso-fareast-language:JA'>Effective as of [insert date that is six months from Ballot 125 adoption], section 4.2 of a CA's Certificate Policy and/or Certification Practice Statement (section 4.1 for CAs still conforming to RFC 2527) SHALL state whether the CA reviews CAA Records, and if so, the CA’s policy or practice on processing CAA Records for Fully Qualified Domain Names. The CA SHALL log all actions taken, if any, consistent with its processing practice. <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>The resulting Section 8.2.2 would read as follows:</span></strong><span lang=EN style='mso-fareast-language:JA'> <o:p></o:p></span></p><p class=line874><span lang=EN style='mso-fareast-language:JA'>The CA SHALL publicly disclose its Certificate Policy and/or Certification Practice Statement through an appropriate and readily accessible online means that is available on a 24x7 basis. The CA SHALL publicly disclose its CA business practices to the extent required by the CA’s selected audit scheme (see Section 17.1). The disclosures MUST include all the material required by RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 or RFC 3647. Effective as of [insert date that is six months from Ballot 125 adoption], section 4.2 of a CA's Certificate Policy and/or Certification Practice Statement (section 4.1 for CAs still conforming to RFC 2527) SHALL state whether the CA reviews CAA Records, and if so, the CA’s policy or practice on processing CAA Records for Fully Qualified Domain Names. The CA SHALL log all actions taken, if any, consistent with its processing practice. <o:p></o:p></span></p><p class=line867><strong><span lang=EN style='mso-fareast-language:JA'>---MOTION ENDS---</span></strong><span lang=EN style='mso-fareast-language:JA'> <o:p></o:p></span></p><p class=line874><span lang=EN style='mso-fareast-language:JA'>The review period for this ballot shall commence at 2200 UTC on Tuesday, 30 September 2014, and will close at 2200 UTC on Tuesday, 7 October 2014. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2200 UTC on Tuesday, 14 October 2014. Votes must be cast by posting an on-list reply to this thread. <o:p></o:p></span></p><p class=line862><span lang=EN style='mso-fareast-language:JA'>A vote in favor of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted. Voting members are listed here: </span><span lang=EN-US style='mso-fareast-language:JA'><a href="https://cabforum.org/members/"><span lang=EN>https://cabforum.org/members/</span></a> </span><span lang=EN style='mso-fareast-language:JA'><o:p></o:p></span></p><p class=line874><span lang=EN style='mso-fareast-language:JA'>In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor. Quorum is currently seven (7) members– at least seven members must participate in the ballot, either by voting in favor, voting against, or abstaining. </span><span lang=EN-US style='mso-fareast-language:JA'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:JA'><o:p> </o:p></span></p></div></div><B><BR><BR><font size="-1">本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件.
如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任.
<BR>Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.</font></B>
</body></html>