<font size=2 face="sans-serif">Jeremy,</font>
<br><font size=2 face="sans-serif">look at point </font><font size=3 face="Arial">7.1.4.2.2.
</font><font size=2 face="sans-serif">when many SDN Fields is prohibited:</font>
<br><font size=2 face="sans-serif"><b>Prohibited if the subject:organizationName
field is absent. </b></font>
<br>
<br><font size=2 face="sans-serif">For the IV Certificates doesn't have
to be filled organizationName but they have to be fields </font><font size=3 face="Calibri">givenName
and surname</font><font size=2 face="sans-serif">.</font>
<br>
<br><font size=2 face="sans-serif">-Piotr</font>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">Od:
</font><font size=1 face="sans-serif">Jeremy Rowley <jeremy.rowley@digicert.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Do:
</font><font size=1 face="sans-serif">"piotr.matusiewicz@unizeto.pl"
<piotr.matusiewicz@unizeto.pl>, "Dean_Coclin@symantec.com"
<Dean_Coclin@symantec.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">DW:
</font><font size=1 face="sans-serif">"public-bounces@cabforum.org"
<public-bounces@cabforum.org>, "public@cabforum.org" <public@cabforum.org></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Data:
</font><font size=1 face="sans-serif">2015-07-23 18:08</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Temat:
</font><font size=1 face="sans-serif">RE: [cabfpub] ODP:
Re: IV OID Ballot 150</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3 color=#004080 face="Calibri">Hi Piotr, </font>
<br><font size=3 color=#004080 face="Calibri"> </font>
<br><font size=3 color=#004080 face="Calibri">What is the inconsistency?
</font>
<br><font size=3 color=#004080 face="Calibri"> </font>
<br><font size=3 color=#004080 face="Calibri">Jeremy</font>
<br><font size=3 color=#004080 face="Calibri"> </font>
<br><font size=3 face="Calibri"><b>From:</b> public-bounces@cabforum.org
[</font><a href="mailto:public-bounces@cabforum.org"><font size=3 face="Calibri">mailto:public-bounces@cabforum.org</font></a><font size=3 face="Calibri">]
<b>On Behalf Of </b>piotr.matusiewicz@unizeto.pl<b><br>
Sent:</b> Thursday, July 16, 2015 12:49 AM<b><br>
To:</b> Dean_Coclin@symantec.com<b><br>
Cc:</b> public-bounces@cabforum.org; public@cabforum.org<b><br>
Subject:</b> [cabfpub] ODP: Re: IV OID Ballot 150</font>
<br><font size=3 face="Times New Roman"> </font>
<br><font size=3 face="Arial">Dean,</font><font size=3 face="Times New Roman">
</font><font size=3 face="Arial"><br>
After this change there will be inconsistency between Section 7.1.6.1 and
Section 7.1.4.2.2. Subject Distinguished Name Fields. <br>
Is any change for Section 7.1.4.2.2. (in scope of description of the requirements
DN fields) planned?</font><font size=3 face="Times New Roman"> <br>
</font><font size=3 face="Arial"><br>
regards</font><font size=3 face="Times New Roman"> </font><font size=3 face="Arial"><br>
-Piotr</font><font size=3 face="Times New Roman"> <br>
<br>
<br>
</font><font size=3 color=#5f5f5f face="Arial"><br>
Od: </font><font size=3 face="Arial">Dean Coclin
<</font><a href=mailto:Dean_Coclin@symantec.com><font size=3 color=blue face="Arial"><u>Dean_Coclin@symantec.com</u></font></a><font size=3 face="Arial">></font><font size=3 face="Times New Roman">
</font><font size=3 color=#5f5f5f face="Arial"><br>
Do: </font><font size=3 face="Arial">"</font><a href=mailto:public@cabforum.org><font size=3 color=blue face="Arial"><u>public@cabforum.org</u></font></a><font size=3 face="Arial">"
<</font><a href=mailto:public@cabforum.org><font size=3 color=blue face="Arial"><u>public@cabforum.org</u></font></a><font size=3 face="Arial">></font><font size=3 face="Times New Roman">
</font><font size=3 color=#5f5f5f face="Arial"><br>
Data: </font><font size=3 face="Arial">2015-07-16
00:33</font><font size=3 face="Times New Roman"> </font><font size=3 color=#5f5f5f face="Arial"><br>
Temat: </font><font size=3 face="Arial">Re:
[cabfpub] IV OID Ballot 150</font><font size=3 face="Times New Roman">
</font><font size=3 color=#5f5f5f face="Arial"><br>
Wysłane przez: </font><a href="mailto:public-bounces@cabforum.org"><font size=3 color=blue face="Arial"><u>public-bounces@cabforum.org</u></font></a><font size=3 face="Times New Roman">
</font>
<div align=center>
<br>
<hr noshade></div>
<br><font size=3 face="Times New Roman"><br>
<br>
</font><font size=3 color=#004080 face="Calibri"><br>
Based on input from Mads, we are going to make a slight modification to
this ballot which I believe is not substantial enough to restart the ballot
period. The change is noted in Green, below the part that is crossed out.
A PDF is enclosed.</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
Voting will start tomorrow.</font><font size=3 face="Times New Roman">
</font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
Thanks,<br>
Dean</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Tahoma"><b><br>
From:</b> </font><a href="mailto:public-bounces@cabforum.org"><font size=3 color=blue face="Tahoma"><u>public-bounces@cabforum.org</u></font></a><font size=3 face="Tahoma">
[</font><a href="mailto:public-bounces@cabforum.org"><font size=3 color=blue face="Tahoma"><u>mailto:public-bounces@cabforum.org</u></font></a><font size=3 face="Tahoma">]
<b>On Behalf Of </b>Dean Coclin<b><br>
Sent:</b> Wednesday, July 08, 2015 5:12 PM<b><br>
To:</b> </font><a href=mailto:public@cabforum.org><font size=3 color=blue face="Tahoma"><u>public@cabforum.org</u></font></a><font size=3 face="Tahoma"><b><br>
Subject:</b> [cabfpub] IV OID Ballot 150</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
I’m reintroducing this ballot based on the meeting in Zurich. I’ll write
a separate ballot for the EV, and EV Code Signing OIDs.</font><font size=3 face="Times New Roman">
</font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
I have highlighted changes to the existing language so hopefully everyone
can see the changes. I’ve also enclosed a pdf version.</font><font size=3 face="Times New Roman">
</font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
Endorsers: I assume you are still good with this? There are no changes.</font><font size=3 face="Times New Roman">
</font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
Thanks,<br>
Dean</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><b><br>
Ballot 150-Addition of Optional OID for Individual Validation</b></font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
The following motion has been proposed by Dean Coclin of Symantec and endorsed
by Jeremy Rowley of Digicert and Kirk Hall of Trend Micro</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
-- MOTION BEGINS –</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
Modify section 1.2 of Baseline Requirements as follows:</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><b><br>
1.2 Document Name and Identification</b></font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
This certificate policy (CP) contains the requirements for the issuance
and management of publicly$B!>(Btrusted SSL certificates, as adopted by the
CA/Browser Forum. <br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
The following Certificate Policy identifiers are reserved for use by CAs
as an optional means of asserting compliance with this CP (OID arc 2.23.140.1.2)
as follows: <br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140)
certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2) domain$B!>(Bvalidated(1)}
(2.23.140.1.2.1); <br>
{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140)
certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2) organization-validated(2)}
(2.23.140.1.2.2) and</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140)
certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2) individual-validated(3)}
(2.23.140.1.2.3).</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
Modify section 7.1.6.1 as follows:</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><b><br>
7.1.6.1. Reserved Certificate Policy Identifiers </b><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
This section describes the content requirements for the Root CA, Subordinate
CA, and Subscriber Certificates, as they relate to the identification of
Certificate Policy. <br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
The following Certificate Policy identifiers are reserved for use by CAs
as an optional means of asserting compliance with these Requirements as
follows: <br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140)
certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2) domain$B!>(Bvalidated(1)}
(2.23.140.1.2.1), if the Certificate complies with these Requirements but
lacks Subject Identity Information that is verified in accordance with
either Section 3.2.2.1 or Section 3.2.3.</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
If the Certificate asserts the policy identifier of 2.23.140.1.2.1, then
it MUST NOT include organizationName, streetAddress, localityName, stateOrProvinceName,
or postalCode in the Subject field. <br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140)
certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2) organization-validated(2)}
(2.23.140.1.2.2), if the Certificate complies with these Requirements and
includes Subject Identity Information that is verified in accordance with
Section 3.2.2.1.</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140)
certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2) individual-validated(3)}
(2.23.140.1.2.3), if the Certificate complies with these Requirements and
includes Subject Identity Information that is verified in accordance with
Section 3.2.3.</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><strike><br>
If the Certificate asserts the policy identifier of either 2.23.140.1.2.2</strike></font><font size=3 color=#004080 face="Calibri"><strike>
</strike></font><font size=3 face="Calibri"><strike>or 2.23.140.1.2.3 ,
then it MUST also include organizationName, localityName, stateOrProvinceName
(if applicable), and countryName in the Subject field.</strike></font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
If the Certificate asserts the policy identifier of 2.23.140.1.2.2, then
it MUST also include organizationName, localityName, stateOrProvinceName
(if applicable), and countryName in the Subject field. If the Certificate
asserts the policy identifier of 2.23.140.1.2.3, then it MUST also include
(i) either organizationName or givenName and surname, (ii) localityName,
(iii) stateOrProvinceName (if applicable), and (iv) tcountryName in the
Subject field</font><font size=3 face="Times New Roman"> </font><font size=3 color=#004080 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
If the ballot passes, the custodian of the Forum OIDs will be instructed
to obtain the new OID for IV as indicated above.</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
-- MOTION ENDS –</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
The review period for this ballot shall commence at 2200 UTC on Thursday
</font><font size=3 color=#004080 face="Calibri">July</font><font size=3 face="Calibri">
</font><font size=3 color=#004080 face="Calibri">9</font><font size=3 face="Calibri">,
2015, and will close at 2200 UTC on Thursday </font><font size=3 color=#004080 face="Calibri">16</font><font size=3 face="Calibri">
Ju</font><font size=3 color=#004080 face="Calibri">ly</font><font size=3 face="Calibri">
2015. Unless the motion is withdrawn during the review period, the voting
period will start immediately thereafter and will close at 2200 UTC on
Thursday, 2</font><font size=3 color=#004080 face="Calibri">3</font><font size=3 face="Calibri">
</font><font size=3 color=#004080 face="Calibri">July</font><font size=3 face="Calibri">
2015. Votes must be cast by posting an on-list reply to this thread.</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
A vote in favor of the motion must indicate a clear 'yes' in the response.
A vote against must indicate a clear 'no' in the response. A vote to abstain
must indicate a clear 'abstain' in the response. Unclear responses will
not be counted. The latest vote received from any representative of a voting
member before the close of the voting period will be counted. Voting members
are listed here: </font><a href=https://cabforum.org/members/><font size=3 color=blue face="Calibri"><u>https://cabforum.org/members/</u></font></a><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
</font><font size=3 face="Times New Roman"> </font><font size=3 face="Calibri"><br>
In order for the motion to be adopted, two thirds or more of the votes
cast by members in the CA category and greater than 50% of the votes cast
by members in the browser category must be in favor. Quorum is currently
nine (9) members– at least nine members must participate in the ballot,
either by voting in favor, voting against, or abstaining.</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri"><br>
[zał(Bącznik "Ballot 150r1.pdf" został usunięty przez użytkownika
Piotr Matusiewicz/UNIZETO] [zał(Bącznik "smime.p7s" został usunięty
przez użytkownika Piotr Matusiewicz/UNIZETO] </font><font size=3 face="Courier New">_______________________________________________<br>
Public mailing list</font><font size=3 color=blue face="Courier New"><u><br>
</u></font><a href=mailto:Public@cabforum.org><font size=3 color=blue face="Courier New"><u>Public@cabforum.org</u></font></a><font size=3 color=blue face="Times New Roman"><u><br>
</u></font><a href=https://cabforum.org/mailman/listinfo/public><font size=3 color=blue face="Courier New"><u>https://cabforum.org/mailman/listinfo/public</u></font></a>
<br>