<div dir="ltr">Thanks for pointing this out Jeremy. Looks like my calendar got confused by the invites sent to the management list.<div><br></div><div>In that case, it's less clear to me where we are at with this discussion. Kirk has suggested twice we delay this discussion until Thursday, but if our calls are not this Thursday, then such a delay seems unnecessary.</div><div><br></div><div>For an issue that has been presented as causing ongoing pain for CAs (c.f. <a href="https://cabforum.org/pipermail/public/2014-October/004148.html">https://cabforum.org/pipermail/public/2014-October/004148.html</a> ), and that we should vote to make SOME progress on it, I feel like delaying up to another month (a week for a call, up to a week for any ballot modifications, a week for review, and a week for voting) would be unwise.</div><div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 3, 2014 at 2:38 PM, Jeremy Rowley <span dir="ltr"><<a href="mailto:jeremy.rowley@digicert.com" target="_blank">jeremy.rowley@digicert.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Just to clarify - this week is not the CAB Forum call – it’s the working group calls. Next week is the Forum call.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><a name="14a10968aa8458a0__MailEndCompose"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></a></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> <a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a> [mailto:<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Ryan Sleevi<br>
<b>Sent:</b> Wednesday, December 3, 2014 7:25 AM<br>
<b>To:</b> <a href="mailto:kirk_hall@trendmicro.com" target="_blank">kirk_hall@trendmicro.com</a><br>
<b>Cc:</b> CABFPub<span class=""><br>
<b>Subject:</b> Re: [cabfpub] Ballot 142 - Elimination of EV Insurance Requirement<u></u><u></u></span></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Wed, Dec 3, 2014 at 2:44 AM, <a href="mailto:kirk_hall@trendmicro.com" target="_blank">
kirk_hall@trendmicro.com</a> <<a href="mailto:kirk_hall@trendmicro.com" target="_blank">kirk_hall@trendmicro.com</a>> wrote:<u></u><u></u></p><div><div class="h5">
<blockquote style="border-style:none none none solid;border-left-color:rgb(204,204,204);border-left-width:1pt;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p>So it looks like there were hurt feelings on both parts – I was unhappy that Mozilla would not honor my request for time to post my ballot on the issue (which covered both insurance and new financial responsibility requirements, which are linked in my mind,
as previously explained), and Gerv was unhappy that I would not post his ballot for him upon request. (Others could have posted the ballot for Gerv as well.)<u></u><u></u></p>
<p> <u></u><u></u></p>
<p>To move past that, I’ll <u>remove</u> Section 1 of my Ballot (relating to elimination of the EV insurance requirement) so Gerv’s ballot will be the exclusive one on that topic. Both ballots can proceed together, but I would urge members to vote yes on both,
as we are removing one intended financial responsibility safeguard (EV insurance, which we have come to see is not very effective) and should substitute another more valuable financial responsibility safeguard (limiting a CA’s ability to disclaim all liability
for its mis-issued certs that cause damage to subscribers and the public). <u></u>
<u></u></p>
<p> <u></u><u></u></p>
<p>The new requirement in Ballot certainly is not a "pointless barrier to entry" as suggested below, but a very valuable safeguard to the public that will help reinforce the value of public CAs over self-signed certs and should be a no-brainer for browsers
-- it clearly protects their users from CA errors -- and very valuable for CAs as well to establish their worth.
<u></u><u></u></p>
<p> <u></u><u></u></p>
<p>I'll be happy to discuss this further on our call Thursday and on this list.<u></u><u></u></p>
<p><u></u> <u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Regrettably, I won't be able to make this Thursday's call. I think the way these ballots have been handled is deeply unfortunate, and I'm disappointed that I won't be able to make the discussion on how we to avoid these sort of situations
of competing interests in the future.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">To the ballots at hand, it should come as no surprise that we share Gerv's concerns that this is, indeed, a "pointless barrier to entry" as it has been called. We do not believe it will provide any meaningful protection for our users -
or indeed, for ANY users - from CA errors, as Kirk has suggested, and that's a point we've repeatedly expressed and discussed in the past, on the list and on the calls.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">As I'll be unable to make and discuss these points further - although I think at this point it's clear that the discussion on adding liabilities is not meaningfully or productively making progress - I'd like to request that whomever is
taking minutes to take detailed minutes so that the discussion can be reviewed following the call.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Ryan<u></u><u></u></p>
</div>
</div></div></div>
</div>
</div>
</div>
</div>
</blockquote></div><br></div></div></div>