<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.MsoFootnoteReference
{vertical-align:super;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>In the last iteration of the Ballot 146 draft of the Baseline Requirements I took out the Network and Certificate System Security Requirements (NetSec) because it appeared that a majority of members, at least those who spoke up, did not want them incorporated by reference under each of the RFC 3647 headings. Did that mean that they didn’t want them referenced as a whole in the Baseline Requirements? As I and others have mentioned several times, Footnote 1 to BR section 16.5 needs to be replaced with an incorporation by reference of the NetSec. For those of you unfamiliar with Footnote 1, it has always been part of the Baseline Requirements. It states, “<span class=MsoFootnoteReference><span class=MsoFootnoteReference><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>[1]</span></span></span> The CA/Browser Forum will enact additional security requirements after the adoption of v1.0 of the Requirements.” I, and others, have read this to mean that we intended to incorporate the NetSec by reference into the BRs. Before I post Ballot 146 (Conversion of BRs to RFC 3647), I propose to insert, as the first sentence of section 5, the following, “The CA/Browser Forum’s Network and Certificate System Security Requirements are incorporated by reference as if fully set forth herein.” <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>