<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Bradley Hand ITC";
panose-1:3 7 4 2 5 3 2 3 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML con formato previo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texto de globo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.HTMLconformatoprevioCar
{mso-style-name:"HTML con formato previo Car";
mso-style-priority:99;
mso-style-link:"HTML con formato previo";
font-family:Consolas;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma","sans-serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
p.HTMLPreformatted, li.HTMLPreformatted, div.HTMLPreformatted
{mso-style-name:"HTML Preformatted";
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.BalloonText, li.BalloonText, div.BalloonText
{mso-style-name:"Balloon Text";
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EstiloCorreo26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EstiloCorreo27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EstiloCorreo28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EstiloCorreo29
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EstiloCorreo30
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:866942845;
mso-list-type:hybrid;
mso-list-template-ids:1740689024 201981967 201981977 201981979 201981967 201981977 201981979 201981967 201981977 201981979;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:18.0pt;
text-indent:-18.0pt;
color:windowtext;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:54.0pt;
text-indent:-18.0pt;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:90.0pt;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:126.0pt;
text-indent:-18.0pt;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:162.0pt;
text-indent:-18.0pt;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:198.0pt;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:234.0pt;
text-indent:-18.0pt;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:270.0pt;
text-indent:-18.0pt;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:306.0pt;
text-indent:-9.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ES link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Steve just clarify how Webtrust works, so there´s a basic webtrust for CA audit and therefore a webtrust SSL Baseline or EV, but all are Webtrust audits and I thought you were saying that you need a CABF audit plus a webtrust. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'>Iñigo Barreira</span></b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'><br>Responsable del Área técnica<br><a href="mailto:i-barreira@izenpe.net">i-barreira@izenpe.net</a><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'>945067705</span><span lang=ES-TRAD style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><img border=0 width=585 height=111 id="_x0000_i1027" src="cid:image001.png@01D066EA.BEA8FA70" alt="Descripción: cid:image001.png@01CE3152.B4804EB0"></span><span lang=ES-TRAD style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD'>ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style='color:#888888;mso-fareast-language:ES-TRAD'><br></span><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD'>ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span style='font-size:12.0pt;color:navy;mso-fareast-language:ES-TRAD'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>De:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] <b>En nombre de </b>i-barreira@izenpe.net<br><b>Enviado el:</b> miércoles, 25 de marzo de 2015 9:28<br><b>Para:</b> kirk_hall@trendmicro.com; public@cabforum.org<br><b>Asunto:</b> Re: [cabfpub] Bylaw update proposal<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Again, inline<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'>Iñigo Barreira</span></b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'><br>Responsable del Área técnica<br><a href="mailto:i-barreira@izenpe.net">i-barreira@izenpe.net</a><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'>945067705</span><span lang=ES-TRAD style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><img border=0 width=585 height=111 id="_x0000_i1025" src="cid:image001.png@01D066EA.BEA8FA70" alt="Descripción: cid:image001.png@01CE3152.B4804EB0"></span><span lang=ES-TRAD style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD'>ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style='color:#888888;mso-fareast-language:ES-TRAD'><br></span><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD'>ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span style='font-size:12.0pt;color:navy;mso-fareast-language:ES-TRAD'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>De:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> <a href="mailto:[mailto:public-bounces@cabforum.org]">[mailto:public-bounces@cabforum.org]</a> <b>En nombre de </b><a href="mailto:kirk_hall@trendmicro.com">kirk_hall@trendmicro.com</a><br><b>Enviado el:</b> miércoles, 25 de marzo de 2015 0:56<br><b>Para:</b> <a href="mailto:public@cabforum.org">public@cabforum.org</a><br><b>Asunto:</b> Re: [cabfpub] Bylaw update proposal<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US>Thanks, Iñigo – let me think about your suggestions more, but here is my initial reaction.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>Should we list specific WebTrust and ETSI audit requirements by their document names? I would say yes, to avoid confusion.<span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>OK<o:p></o:p></span></p><p class=MsoListParagraph><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US>If I am reading your edits below correctly, I think you are only asking for <u>one</u> audit - a Baseline Requirements audit and not a classic WebTrust audit – <span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'>I don´t understand what this means. What is a baseline requirement audit? In which standard is based? The classic Webtrust audit does not cover the CABF baseline requirements? I think you need either a Webtrust for CAs, which I think it covers the CABF baselines, or and ETSI one which already covers the baselines. I don´t know how the Webtrust for CAs works/is (never went thru one, just a webtrust for EV) but yes, for me it´s one audit. So, unless we request that you have to be certified for a baseline plus the extended one then in that case, it´s needed 2, the webtrust for EV and the same ETSI standard with an additional policy, the EVCP. But I don´t think this is the idea to be a CABF member.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US>but the root programs require <u>both</u> (at least for CAs that use WebTrust).<span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'>Still don´t get it. I´ve checked Apple, Microsoft and Mozilla root programs and they indicate that to submit and be part of the program, to have a Webtrust or ETSI audit. The CABF sets the guidelines or requirements and after that, Webtrust and ETSI adapts/updates/creates the standards needed to fulfill those requirements for the auditors to use in the certification process. <o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US>We can continue to list the ETSI 102042 / 101046 audit numbers if they are still valid.<span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'>They are still valid. What I said last times is that 101 456 is just for qualified certificates, which was not related to SSL certs (but for other types).<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US>If you know what the new ETSI numbers will be, we can add them as well. If you want to also include the names for these ETSI audit numbers, we can do that too.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:0cm'><span lang=EN-US style='color:#1F497D'>I´ve said several times during the last years and they´re included in the different root programs (well, apple still refers to webtrust or a third one equivalent but hopefully they will change) and in the last CABF F2F at Cupertino I think that everything got clear, at least from the feedback I got from Mozilla. It was explained how these ETSI TS docs will be changed with the new ENs in the coming years, probably by 2016.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The main point is that CA membership requirements should be the same as the trusted root program requirements, whether WebTrust or ETSI.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Sure<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>I’m happy to add “accredited” after “properly-qualified” for auditors.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Well, is not a big issue but just to be aligned with the ETSI terminology<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>You mentioned Peter Bowen’s extremely useful participation and suggested we need to make that kind of participation easier – I fully agree, but that is a separate issue (as Peter is not a CA, so won’t ever be a Member). I believe Ryan is working on a plan so that Interested Parties like Peter and others can easily post to our lists, without the need for reposting – we support that. But these issues do not impact our Bylaw changes for how CAs can become Members.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>OK, I didn´t know that about Peter, but sometimes in the past, and can´t remember the reasoning, but we´ve had Tom Ritter, Brad of Paypal and some colleagues (even they host a CABF F2F meeting in Arizona and are not a CA), other guy from RedHat or similar (can´t remember the name but it had a long surname and use to write reports on SSL security), etc. Those are valuable addings and well, if they are not CAs, at least have them the chance to participate.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>As to what a new CA applicant should show the Forum as part of the application process (subsection (7) below) – I specifically listed certificates, CRLs, and OCSP links because they are the core requirements to show the CA “actively<span style='letter-spacing:-.35pt'> </span>issues certificat<span style='letter-spacing:-.05pt'>e</span>s,” which necessarily means the applicant must show is allowing revocation checking (and we have typically looked at CRLs and OCSP responses anyway for new applicants). I would not add things like CAA and CT, as those requirements are not as central to the question of whether the CA applicant “actively<span style='letter-spacing:-.35pt'> </span>issues certificat<span style='letter-spacing:-.05pt'>e</span>s” as CRLs/OCSP does.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Well, my suggestion was more in the use of general naming than specific “solutions”. We all know terms like CRL and OCSP, but, for a general language, we can set or write a “certificate status” instead of specific solutions and thus avoiding changing the document in the near future if a new solution for checking the status of a certificate appears.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Kirk<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> <a href="mailto:i-barreira@izenpe.net">i-barreira@izenpe.net</a> <a href="mailto:[mailto:i-barreira@izenpe.net]">[mailto:i-barreira@izenpe.net]</a> <br><b>Sent:</b> Tuesday, March 24, 2015 3:42 AM<br><b>To:</b> Kirk Hall (RD-US); <a href="mailto:public@cabforum.org">public@cabforum.org</a><br><b>Subject:</b> RE: [cabfpub] Bylaw update proposal<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Kirk,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Inline my suggestions<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'>Iñigo Barreira</span></b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'><br>Responsable del Área técnica<br><a href="mailto:i-barreira@izenpe.net">i-barreira@izenpe.net</a><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black'>945067705</span><span lang=ES-TRAD style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><img border=0 width=585 height=111 id="Imagen_x0020_1" src="cid:image001.png@01D066EA.BEA8FA70" alt="Descripción: cid:image001.png@01CE3152.B4804EB0"></span><span lang=ES-TRAD style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD'>ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style='color:#888888;mso-fareast-language:ES-TRAD'><br></span><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD'>ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span style='font-size:12.0pt;color:navy;mso-fareast-language:ES-TRAD'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>De:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> <a href="mailto:[mailto:public-bounces@cabforum.org]">[mailto:public-bounces@cabforum.org]</a> <b>En nombre de </b><a href="mailto:kirk_hall@trendmicro.com">kirk_hall@trendmicro.com</a><br><b>Enviado el:</b> martes, 24 de marzo de 2015 2:11<br><b>Para:</b> CABFPub (<a href="mailto:public@cabforum.org">public@cabforum.org</a>)<br><b>Asunto:</b> [cabfpub] Bylaw update proposal<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><u><span lang=EN-US>Dean</span></u><span lang=EN-US> – funny you should bring up the membership rules in the Bylaws. I have just incorporated the comments from our recent face to face meeting in the revised text below, and would like to present it for discussion as a pre-ballot. It incorporates the issue you have just raised.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Here is my revised proposal for revising Bylaw 2.1:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>2.1 Qualif<span style='letter-spacing:-.1pt'>y</span>ing<span style='letter-spacing:-.55pt'> </span>for<span style='letter-spacing:-.15pt'> </span>Forum<span style='letter-spacing:-.35pt'> </span>Membership</span></b><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:25.9pt'><span lang=EN-US>(a)<span style='letter-spacing:1.35pt'> </span>CA/Browser<span style='letter-spacing:-.6pt'> </span>Forum<span style='letter-spacing:-.3pt'> </span>m<span style='letter-spacing:.05pt'>e</span>mbers<span style='letter-spacing:-.45pt'> </span>shall<span style='letter-spacing:-.3pt'> </span>meet<span style='letter-spacing:-.25pt'> </span>at<span style='letter-spacing:-.1pt'> </span>least<span style='letter-spacing:-.25pt'> </span>one<span style='letter-spacing:-.2pt'> </span>of<span style='letter-spacing:-.1pt'> </span>the<span style='letter-spacing:-.15pt'> </span><span style='letter-spacing:-.05pt'>f</span>ollowing<span style='letter-spacing:-.45pt'> </span>cri<span style='letter-spacing:-.05pt'>t</span>eria.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:21.2pt;margin-bottom:0cm;margin-left:61.9pt;margin-bottom:.0001pt;text-indent:-18.0pt'><span lang=EN-US>(1)<span style='letter-spacing:1.35pt'> </span><u>Issuing<span style='letter-spacing:-.4pt'> </span>CA:</u><span style='letter-spacing:-.25pt'> </span>The<span style='letter-spacing:-.2pt'> </span>memb<span style='letter-spacing:.05pt'>e</span>r<span style='letter-spacing:-.4pt'> </span>organizati<span style='letter-spacing:-.05pt'>o</span>n<span style='letter-spacing:-.6pt'> </span>operates<span style='letter-spacing:-.45pt'> </span>a<span style='letter-spacing:-.1pt'> </span>certific<span style='letter-spacing:-.05pt'>a</span>tion<span style='letter-spacing:-.6pt'> </span>authority<span style='letter-spacing:-.4pt'> </span>that<span style='letter-spacing:-.2pt'> </span>has<span style='letter-spacing:-.2pt'> </span><s>a</s> current<span style='letter-spacing:-.35pt'> </span>and<span style='letter-spacing:-.25pt'> </span>successful<span style='letter-spacing:-.55pt'> </span><i><s>WebTrust<span style='letter-spacing:-.5pt'> </span>f<span style='letter-spacing:-.05pt'>o</span>r<span style='letter-spacing:-.15pt'> </span>CAs audit</s></i><span style='letter-spacing:-.2pt'> </span><b><s><u>Trust Service Principles and Criteria for Certification Authorities and WebTrust Principles and Criteria for Certification Authorities –<span style='color:#1F497D'> </span></u></s><u><span style='color:#1F497D'>CABF </span> SSL Baseline <span style='color:#1F497D'>requirements </span>with Network Security audit</u></b>,<span style='letter-spacing:-.25pt'> <span style='color:#1F497D'>based on WebTrust </span></span>or<span style='letter-spacing:-.1pt'> </span>ETSI<span style='letter-spacing:-.25pt'> </span><i><s>102042<span style='letter-spacing:-.35pt'> </span>or<span style='letter-spacing:-.1pt'> </span>ETSI<span style='letter-spacing:-.25pt'> </span>101456</s></i> <b><s><u><span style='letter-spacing:-.25pt'>equivalent</span></u></s><span style='letter-spacing:-.25pt'> </span></b>audit<span style='letter-spacing:-.25pt'> </span>report<b><u>s</u></b><span style='letter-spacing:-.35pt'> </span>prepared<span style='letter-spacing:-.45pt'> </span>by<span style='letter-spacing:-.1pt'> </span>a<span style='letter-spacing:-.05pt'> </span>properly-qualified<span style='letter-spacing:-.85pt'> <span style='color:#1F497D'>or accredited </span></span>a<span style='letter-spacing:-.05pt'>u</span>ditor,<span style='letter-spacing:-.35pt'> </span>and<span style='letter-spacing:-.2pt'> </span>t<span style='letter-spacing:-.05pt'>h</span>at<span style='letter-spacing:-.2pt'> </span>actively<span style='letter-spacing:-.35pt'> </span>issues certificat<span style='letter-spacing:-.05pt'>e</span>s<span style='letter-spacing:-.5pt'> </span><span style='letter-spacing:-.05pt'>t</span>o<span style='letter-spacing:-.1pt'> </span>Web<span style='letter-spacing:-.25pt'> </span><s>servers</s><span style='letter-spacing:-.35pt'> </span>that<span style='letter-spacing:-.2pt'> </span>are<span style='letter-spacing:-.2pt'> </span>openly<span style='letter-spacing:-.3pt'> </span>acc<span style='letter-spacing:-.05pt'>e</span>ssible<span style='letter-spacing:-.5pt'> </span>from<span style='letter-spacing:-.2pt'> </span><span style='letter-spacing:-.05pt'>t</span>he<span style='letter-spacing:-.15pt'> </span>Internet<span style='letter-spacing:-.4pt'> </span>using<span style='letter-spacing:-.25pt'> </span>any one<span style='letter-spacing:-.2pt'> </span>of<span style='letter-spacing:-.1pt'> </span>the<span style='letter-spacing:-.15pt'> </span>mainstream<span style='letter-spacing:-.55pt'> </span>browsers. <b><u>Applicants that are not actively issuing certificates but otherwise meet membership criteria may be granted Interested Party status for a period of time and participate in meetings, teleconferences, and Member mailing lists, but may not propose or endorse ballots or vote.<o:p></o:p></u></b></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:4.55pt;margin-bottom:0cm;margin-left:61.9pt;margin-bottom:.0001pt;text-indent:-18.0pt'><span lang=EN-US>(2)<span style='letter-spacing:1.35pt'> </span><u>Root<span style='letter-spacing:-.25pt'> </span>CA:</u><span style='letter-spacing:-.2pt'> </span>T<span style='letter-spacing:.05pt'>h</span>e<span style='letter-spacing:-.2pt'> </span>member<span style='letter-spacing:-.4pt'> </span><span style='letter-spacing:.05pt'>o</span>rganization<span style='letter-spacing:-.65pt'> </span>operates<span style='letter-spacing:-.45pt'> </span>a<span style='letter-spacing:-.05pt'> </span>certification<span style='letter-spacing:-.6pt'> </span><span style='letter-spacing:-.05pt'>a</span>uthority<span style='letter-spacing:-.4pt'> </span>that<span style='letter-spacing:-.2pt'> </span>has<span style='letter-spacing:-.2pt'> </span>a current<span style='letter-spacing:-.35pt'> </span>and<span style='letter-spacing:-.25pt'> </span>successful<span style='letter-spacing:-.55pt'> </span><i><s>WebTrust<span style='letter-spacing:-.5pt'> </span>f<span style='letter-spacing:-.05pt'>o</span>r<span style='letter-spacing:-.15pt'> </span>CAs audit</s></i><span style='letter-spacing:-.2pt'> </span><b><s><u>Trust Service Principles and Criteria for Certification Authorities and WebTrust Principles and Criteria for Certification Authorities –</u></s><u> <span style='color:#1F497D'>CABF </span>SSL Baseline <span style='color:#1F497D'>requirements </span>with Network Security audit</u></b>,<span style='letter-spacing:-.25pt'> <span style='color:#1F497D'>based on WebTrust </span></span>or<span style='letter-spacing:-.1pt'> </span>ETSI<span style='letter-spacing:-.25pt'> </span><i><s>102042<span style='letter-spacing:-.35pt'> </span>or<span style='letter-spacing:-.1pt'> </span>ETSI<span style='letter-spacing:-.25pt'> </span>101456</s></i> <b><s><u><span style='letter-spacing:-.25pt'>equivalent</span></u></s></b><span style='letter-spacing:-.35pt'> </span>audit report<b><u>s</u></b><span style='letter-spacing:-.3pt'> </span>prepared<span style='letter-spacing:-.45pt'> </span>by<span style='letter-spacing:-.1pt'> </span>a<span style='letter-spacing:-.05pt'> </span>properly-qualified<span style='letter-spacing:-.85pt'> <span style='color:#1F497D'>or accredited </span></span>auditor,<span style='letter-spacing:-.35pt'> </span>and<span style='letter-spacing:-.2pt'> </span>that<span style='letter-spacing:-.2pt'> </span>actively<span style='letter-spacing:-.35pt'> </span>issues<span style='letter-spacing:-.3pt'> </span>certificates<span style='letter-spacing:-.55pt'> </span>to subordinate<span style='letter-spacing:-.6pt'> </span>CAs<span style='letter-spacing:-.2pt'> </span>that,<span style='letter-spacing:-.2pt'> </span>in<span style='letter-spacing:-.1pt'> </span>turn,<span style='letter-spacing:-.2pt'> </span>actively<span style='letter-spacing:-.35pt'> </span>issue<span style='letter-spacing:-.25pt'> </span>certi<span style='letter-spacing:-.05pt'>f</span>icates<span style='letter-spacing:-.55pt'> </span>to<span style='letter-spacing:-.1pt'> </span>W<span style='letter-spacing:-.05pt'>e</span>b<span style='letter-spacing:-.25pt'> </span>servers<span style='letter-spacing:-.35pt'> </span>that<span style='letter-spacing:-.2pt'> </span>are openly acc<span style='letter-spacing:-.05pt'>e</span>ssible<span style='letter-spacing:-.5pt'> </span>from<span style='letter-spacing:-.2pt'> </span><span style='letter-spacing:-.05pt'>t</span>he<span style='letter-spacing:-.15pt'> </span>Internet<span style='letter-spacing:-.4pt'> </span>using<span style='letter-spacing:-.25pt'> </span>any<span style='letter-spacing:-.2pt'> </span>one<span style='letter-spacing:-.2pt'> </span>of<span style='letter-spacing:-.1pt'> </span>the<span style='letter-spacing:-.15pt'> </span>mainstream<span style='letter-spacing:-.55pt'> </span>browsers. <b><u>Applicants that are not actively issuing certificates but otherwise meet membership criteria may be granted Interested Party status for a period of time and participate in meetings, teleconferences, and Member mailing lists, but may not propose or endorse ballots or vote.</u></b><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:5.85pt;margin-bottom:0cm;margin-left:61.9pt;margin-bottom:.0001pt;text-indent:-18.0pt'><span lang=EN-US>(3)<span style='letter-spacing:1.35pt'> </span><u>Browser:</u><span style='letter-spacing:-.45pt'> </span>The<span style='letter-spacing:-.2pt'> </span>member<span style='letter-spacing:-.4pt'> </span><span style='letter-spacing:.05pt'>o</span>rganization<span style='letter-spacing:-.65pt'> </span>produces<span style='letter-spacing:-.45pt'> </span>a<span style='letter-spacing:-.1pt'> </span>software<span style='letter-spacing:-.4pt'> </span>product<span style='letter-spacing:-.35pt'> </span>intend<span style='letter-spacing:-.05pt'>e</span>d<span style='letter-spacing:-.4pt'> </span>for<span style='letter-spacing:-.15pt'> </span>use<span style='letter-spacing:-.2pt'> </span>by the<span style='letter-spacing:-.15pt'> </span>general<span style='letter-spacing:-.4pt'> </span>public<span style='letter-spacing:-.3pt'> </span>for<span style='letter-spacing:-.15pt'> </span>b<span style='letter-spacing:-.05pt'>r</span>owsing<span style='letter-spacing:-.45pt'> </span>the<span style='letter-spacing:-.2pt'> </span>Web<span style='letter-spacing:-.25pt'> </span>securely.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:25.9pt'><span lang=EN-US>(b) Applicants should supply the following information:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:8.85pt;margin-bottom:0cm;margin-left:61.9pt;margin-bottom:.0001pt;text-indent:-18.0pt'><span lang=EN-US>(1) Confirmation that the applicant satisfies at least one of the membership criteria (and if it satisfies more than one, indication of the single category under which the applicant wishes to apply).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:43.9pt'><span lang=EN-US>(2) URL of the current qualifying performance audit report.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:34.5pt;margin-bottom:0cm;margin-left:61.9pt;margin-bottom:.0001pt;text-indent:-18.0pt'><span lang=EN-US>(3) The organization name, as you wish it to appear on the Forum Web site and in official Forum documents.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:43.9pt'><span lang=EN-US>(4) URL of the applicant's main Web site.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:5.35pt;margin-bottom:0cm;margin-left:43.9pt;margin-bottom:.0001pt'><span lang=EN-US>(5) Names and email addresses of employees who will participate in the Forum mail list. <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:5.35pt;margin-bottom:0cm;margin-left:43.9pt;margin-bottom:.0001pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:5.35pt;margin-bottom:0cm;margin-left:43.9pt;margin-bottom:.0001pt'><span lang=EN-US>(6) Emergency contact information for security issues related to certificate trust.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:5.35pt;margin-bottom:0cm;margin-left:43.9pt;margin-bottom:.0001pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:5.35pt;margin-bottom:0cm;margin-left:63.0pt;margin-bottom:.0001pt;text-indent:-18.0pt'><b><span lang=EN-US>(<u>7) Links or references to issued certificates that demonstrate compliance with all applicable certificate, CRL, and OCSP requirements.</u><o:p></o:p></span></b></p><p class=MsoNormal style='margin-left:27.0pt'><span lang=EN-US style='font-size:8.5pt'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:13.4pt;margin-bottom:0cm;margin-left:27.0pt;margin-bottom:.0001pt;text-indent:-18.0pt'><span lang=EN-US>(c)<span style='letter-spacing:2.0pt'> </span>An<span style='letter-spacing:-.15pt'> </span>Applica<span style='letter-spacing:-.05pt'>n</span>t<span style='letter-spacing:-.45pt'> </span>shall<span style='letter-spacing:-.25pt'> </span>b<span style='letter-spacing:-.05pt'>e</span>c<span style='letter-spacing:-.05pt'>o</span>me<span style='letter-spacing:-.4pt'> </span>a<span style='letter-spacing:-.05pt'> </span>M<span style='letter-spacing:.05pt'>e</span>m<span style='letter-spacing:.05pt'>b</span>er<span style='letter-spacing:-.4pt'> </span>once<span style='letter-spacing:-.25pt'> </span>the<span style='letter-spacing:-.2pt'> </span>Forum<span style='letter-spacing:-.3pt'> </span>has<span style='letter-spacing:-.2pt'> </span>determined<span style='letter-spacing:-.55pt'> </span>by<span style='letter-spacing:-.1pt'> </span><i><s>vote</s></i><span style='letter-spacing:-.2pt'> </span><b><u>consensus among the Members during a teleconference or meeting</u></b> that<span style='letter-spacing:-.15pt'> </span>the Applicant<span style='letter-spacing:-.45pt'> </span>meets<span style='letter-spacing:-.3pt'> </span>all<span style='letter-spacing:-.1pt'> </span>of<span style='letter-spacing:-.1pt'> </span>t<span style='letter-spacing:-.05pt'>h</span>e<span style='letter-spacing:-.15pt'> </span>requirements<span style='letter-spacing:-.65pt'> </span>of<span style='letter-spacing:-.1pt'> </span>subs<span style='letter-spacing:-.05pt'>e</span><span style='letter-spacing:.05pt'>c</span>tion<span style='letter-spacing:-.55pt'> </span>(a) <b><u>or, upon the request of any Member, by a Ballot among the Members</u></b>.<span style='letter-spacing:2.9pt'> </span><i><s>A<span style='letter-spacing:-.1pt'> </span>vote of</s></i><span style='letter-spacing:-.2pt'> </span><b><u>Acceptance by consensus shall be determined or a Ballot of<span style='letter-spacing:-.1pt'> the</span></u></b><span style='letter-spacing:-.1pt'> </span>M<span style='letter-spacing:.05pt'>e</span>mbers<span style='letter-spacing:-.45pt'> </span>shall<span style='letter-spacing:-.3pt'> </span><span style='letter-spacing:-.05pt'>b</span>e held<span style='letter-spacing:-.2pt'> </span>as<span style='letter-spacing:-.1pt'> </span>so<span style='letter-spacing:-.05pt'>o</span>n<span style='letter-spacing:-.25pt'> </span>as<span style='letter-spacing:-.1pt'> </span>the<span style='letter-spacing:-.15pt'> </span>A<span style='letter-spacing:-.05pt'>p</span>plicant<span style='letter-spacing:-.45pt'> </span>in<span style='letter-spacing:-.05pt'>d</span>icates<span style='letter-spacing:-.45pt'> </span>that<span style='letter-spacing:-.2pt'> </span>it<span style='letter-spacing:-.05pt'> h</span>as<span style='letter-spacing:-.2pt'> </span>present<span style='letter-spacing:-.05pt'>e</span>d<span style='letter-spacing:-.5pt'> </span>all<span style='letter-spacing:-.1pt'> </span>information<span style='letter-spacing:-.55pt'> </span>required under<span style='letter-spacing:-.3pt'> </span>subs<span style='letter-spacing:-.05pt'>e</span><span style='letter-spacing:.05pt'>c</span>tion<span style='letter-spacing:-.55pt'> </span>(b)<span style='letter-spacing:-.15pt'> </span>and<span style='letter-spacing:-.25pt'> </span>has<span style='letter-spacing:-.2pt'> </span>respo<span style='letter-spacing:-.05pt'>n</span>ded<span style='letter-spacing:-.5pt'> </span>to<span style='letter-spacing:-.1pt'> </span>all<span style='letter-spacing:-.1pt'> </span>follow-up<span style='letter-spacing:-.45pt'> </span>questions<span style='letter-spacing:-.45pt'> </span>from<span style='letter-spacing:-.2pt'> </span>the<span style='letter-spacing:-.15pt'> </span>Forum<span style='letter-spacing:-.3pt'> </span>and the<span style='letter-spacing:-.15pt'> </span>Member<span style='letter-spacing:-.4pt'> </span>has<span style='letter-spacing:-.2pt'> </span>complied<span style='letter-spacing:-.45pt'> </span>with<span style='letter-spacing:-.2pt'> </span>the<span style='letter-spacing:-.15pt'> </span>requirements<span style='letter-spacing:-.65pt'> </span>of<span style='letter-spacing:-.1pt'> </span>Section<span style='letter-spacing:-.35pt'> </span><span style='letter-spacing:-.05pt'>5</span>.5.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><u><span lang=EN-US>Explanation of Bylaw amendments<o:p></o:p></span></u></b></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The amendments do the following (for WebTrust, please read in “or ETSI equivalent”):<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US>1. Update the old name of WebTrust for CAs to the new name.<span style='color:#1F497D'> To be fair not WebTrust should be so explicit and just say ETSI equivalent giving less importance. I´ve removed the whole title of the Webtrust.</span><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>2. Add the requirement of a BR WebTrust audit (since no CA can issue SSL certs today without one, and the BRs are the most important product of the Forum to date – why would a CA want to join the Forum if it can’t or won’t follow the BRs and get a BR WebTrust audit? Why would we want that CA as a CA Member?) <span style='color:#1F497D'>Again, you´re always focusing on Webtrust. This should be independent of whatever audit certification.</span><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>There was some discussion that CAs without a BR WebTrust might want to participate anyway – I doubt that, but they can comment on the public list and join working groups. There was also discussion that CAs that only issue code signing certs don’t need a BR WebTrust audit under browser rules – to date, no CA issuing only code signing certs has applied to be a Member, so maybe we just wait to see if this ever happens.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>The requirement of the certification is done by the browser root programs but being a member of the CABF does not need to follow the same rules. I´d leave it open even I´ve included in the text that has to be certified just to follow the current text. In any case, I´m not opposed but I think is a little bit strange or ridiculous including messages from Peter Bowen all the time saying “posted with permission” or “forwarded with permission”, because at the end, we´re treating them as they were posted by any member.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>3. I was told our old ETSI numbers are no longer valid. To deal with this into the future, I have changed the language above to “or ETSI equivalent” so the reference will always be valid.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>The ETSI numbers are still valid, what I´ve said is that they are going to change. But again, you´re unfair with ETSI, don´t mind indicating the whole title of the Webtrust document but not the ETSI one. To be fair, I´ve just indicated Webtrust or ETSI, I think this is enough. If more detailed is needed, then, we should include the whole text for both not just one. The CABF is not only US centric.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>4. Instead of giving a new CA “observer” status, which is not defined, I followed the suggestion to give the new CA “Interested Party” status, which is defined at Bylaw 3.1. We get to define the level of participation of various Interested Parties, so we could allow a new CA to participate (but not vote) on all conference calls, meetings, and mail lists, the same as we do for WebTrust and ETSI representatives.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>5. I added the following as an additional item of information that new CAs would have to submit to apply for membership: “Links or references to issued certificates that demonstrate compliance with all applicable certificate, CRL, and OCSP requirements.” That is similar to what you were seeking.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Not sure to include the CRL and OCSP requirements, because there are some others that also “apply” or will apply, like CT, CAA, … Are we sure that we want to include terms instead of saying the for example, “status checking requirements”? This way, all of them apply more or less.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>6. Finally, I clarified that new members could be accepted by consensus during a teleconference of meeting of the Members, but that any Member could request a Ballot on acceptance (so if a Member objected, it could take the matter to a vote). This is roughly what we have been doing.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I welcome comments.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><i><span lang=EN-US style='font-size:14.0pt;font-family:"Bradley Hand ITC";color:#0F243E'>Kirk R. Hall<o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>Operations Director, Trust Services<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Trend Micro<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>+1.503.753.3088<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='background:white;padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='padding:.75pt .75pt .75pt .75pt'><pre><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>TREND MICRO EMAIL NOTICE<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>The information contained in this email and any attachments is confidential <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>and may be subject to copyright or other intellectual property protection. <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>If you are not the intended recipient, you are not authorized to use or <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>disclose this information, and we request that you notify us by reply mail or<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>telephone and delete the original message from your mail system.<o:p></o:p></span></pre></td></tr></table></td></tr></table><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='background:white;padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='padding:.75pt .75pt .75pt .75pt'><pre><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>TREND MICRO EMAIL NOTICE<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>The information contained in this email and any attachments is confidential <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>and may be subject to copyright or other intellectual property protection. <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>If you are not the intended recipient, you are not authorized to use or <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>disclose this information, and we request that you notify us by reply mail or<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>telephone and delete the original message from your mail system.<o:p></o:p></span></pre></td></tr></table></td></tr></table><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></body></html>