<font size=2 face="sans-serif">CERTUM votes Yes</font>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">Od:
</font><font size=1 face="sans-serif">Dean Coclin <Dean_Coclin@symantec.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Do:
</font><font size=1 face="sans-serif">"public@cabforum.org"
<public@cabforum.org></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Data:
</font><font size=1 face="sans-serif">2015-09-14 21:11</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Temat:
</font><font size=1 face="sans-serif">[cabfpub] Ballot 151</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Wysłane przez:
</font><font size=1 face="sans-serif">public-bounces@cabforum.org</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3 face="Calibri">Due to the confusion as to the voting period
on ballot 150, it failed for lack of quorum. We are therefore submitting
this as a new ballot. The discussion period begins today followed by voting
per the schedule below. We believe we have captured all the comments
but if you have others, please feel free to remark.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"><b> </b></font>
<br><font size=3 face="Calibri"><b>Ballot 151- Revised Addition of Optional
OIDs for Indicating Level of Validation</b></font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"> The following motion has been proposed
by Dean Coclin of Symantec and endorsed by Jeremy Rowley of Digicert and
Kirk Hall of Trend Micro.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">-- MOTION BEGINS –</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">1)</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri">Modify section 1.2
of Baseline Requirements as follows:</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"><b>1.2 Document Name and Identification</b></font>
<br><font size=3 face="Calibri">This certificate policy (CP) contains the
requirements for the issuance and management of publicly$B!>(Btrusted SSL
certificates, as adopted by the CA/Browser Forum. </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">The following Certificate Policy identifiers
are reserved for use by CAs as an optional means of asserting compliance
with this CP (OID arc 2.23.140.1.2) as follows: </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2)
domain$B!>(Bvalidated(1)} (2.23.140.1.2.1); </font>
<br><font size=3 color=#004080 face="Calibri"> </font>
<br><font size=3 face="Calibri">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2)
organization-validated(2)} (2.23.140.1.2.2) and</font>
<br><font size=3 color=#004080 face="Calibri"> </font>
<br><font size=3 face="Calibri"><u>{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2)
individual-validated(3)} (2.23.140.1.2.3).</u></font>
<br><font size=3 color=#004080 face="Calibri"> </font>
<br><font size=3 face="Calibri">2)</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri">Modify section 7.1.6.1
of the Baseline Requirements as follows:</font>
<br><font size=3 color=#004080 face="Calibri"><b> </b></font>
<br><font size=3 face="Calibri"><b>7.1.6.1. Reserved Certificate Policy
Identifiers </b></font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">This section describes the content requirements
for the Root CA, Subordinate CA, and Subscriber Certificates, as they relate
to the identification of Certificate Policy. </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">The following Certificate Policy identifiers
are reserved for use by CAs as an optional means of asserting compliance
with these Requirements as follows: </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2)
domain$B!>(Bvalidated(1)} (2.23.140.1.2.1), if the Certificate complies with
these Requirements but lacks Subject Identity Information that is verified
in accordance with either Section 3.2.2.1 <u>or Section 3.2.3</u>.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">If the Certificate asserts the policy identifier
of 2.23.140.1.2.1, then it MUST NOT include organizationName, givenName,
surname, streetAddress, localityName, stateOrProvinceName, or postalCode
in the Subject field. </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2)
organization-validated(2)} (2.23.140.1.2.2), if the Certificate complies
with these Requirements and includes Subject Identity Information that
is verified in accordance with Section 3.2.2.1.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"><u>{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2)
individual-validated(3)} (2.23.140.1.2.3), if the Certificate complies
with these Requirements and includes Subject Identity Information that
is verified in accordance with Section 3.2.3.</u></font>
<br><font size=3 face="Calibri"><u> </u></font>
<br><font size=3 face="Calibri">If the Certificate asserts the policy identifier
of 2.23.140.1.2.2, then it MUST also include organizationName, localityName
<u>(to the extent such field is required under Section 7.1.4.2.2)</u>,
stateOrProvinceName <u>(to the extent such field is required under Section
7.1.4.2.2</u>), and countryName in the Subject field. <u>If the Certificate
asserts the policy identifier of 2.23.140.1.2.3, then it MUST also include
(i) either organizationName or givenName and surname, (ii) localityName
(to the extent such field is required under Section 7.1.4.2.2), (iii) stateOrProvinceName
(to the extent required under Section 7.1.4.2.2), and (iv) countryName
in the Subject field.</u></font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">3)</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri">Modify the definition
of $B!H(BEV OID$B!I(B in the EV Guidelines as follows:</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"><b>EV OID</b>: An identifying number, in
the form of an $B!H(Bobject identifier,$B!I(B that is included in the certificatePolicies
field of a certificate that: (i) indicates which CA policy statement relates
to that certificate, and (ii) <u>is either the CA/Browser Forum EV policy
identifier or a policy identifier that</u>, by pre-agreement with
one or more Application Software Supplier, marks the certificate as being
an EV Certificate.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">4)</font><font size=3 face="Times New Roman">
</font><font size=3 face="Calibri">Modify Section 9.3.2
of the EV Guidelines as follows:</font>
<br><font size=3 face="Calibri">Each EV Certificate issued by the CA to
a Subscriber MUST contain a policy identifier <u>that is either</u> defined
by <u>these Guidelines or </u>the CA in the certificate$B!G(Bs certificatePolicies
extension that: (i) indicates which CA policy statement relates to that
Certificate, (ii) asserts the CA$B!G(Bs adherence to and compliance with these
Guidelines, and (iii), <u>is either the CA/Browser Forum$B!G(Bs EV policy
identifier or a policy identifier that, </u>by pre-agreement with the Application
Software Supplier, marks the Certificate as being an EV Certificate.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"><u>The following Certificate Policy identifier
is the CA/Browser Forum$B!G(Bs EV policy identifier: </u></font>
<br><font size=3 face="Calibri"><u>{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23)
ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) ev-guidelines (1) }
(2.23.140.1.1), if the Certificate complies with these Guidelines.</u></font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">If the ballot passes, the custodian of
the Forum OIDs will be instructed to obtain the new OID for IV as indicated
above.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">-- MOTION ENDS –</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">The review period for this ballot shall
commence at 2200 UTC on Monday, September 14, 2015, and will close at 2200
UTC on Monday, September 21, 2015. Unless the motion is withdrawn during
the review period, the voting period will start immediately thereafter
and will close at 2200 UTC on Monday, September 28, 2015. Votes must be
cast by posting an on-list reply to this thread.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">A vote in favor of the motion must indicate
a clear 'yes' in the response. A vote against must indicate a clear 'no'
in the response. A vote to abstain must indicate a clear 'abstain' in the
response. Unclear responses will not be counted. The latest vote received
from any representative of a voting member before the close of the voting
period will be counted. Voting members are listed here: </font><a href=https://cabforum.org/members/><font size=3 color=blue face="Calibri"><u>https://cabforum.org/members/</u></font></a>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">In order for the motion to be adopted,
two thirds or more of the votes cast by members in the CA category and
greater than 50% of the votes cast by members in the browser category must
be in favor. Quorum is currently nine (9) members– at least nine members
must participate in the ballot, either by voting in favor, voting against,
or abstaining.</font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri"> </font>
<br><font size=3 face="Calibri">Dean Coclin</font>
<br><font size=3 face="Calibri">Chair CA/B Forum</font>
<br><font size=3 face="Calibri"> [zał(Bącznik "smime.p7s"
został usunięty przez użytkownika Piotr Matusiewicz/UNIZETO] </font><tt><font size=2>_______________________________________________<br>
Public mailing list<br>
Public@cabforum.org<br>
</font></tt><a href=https://cabforum.org/mailman/listinfo/public><tt><font size=2>https://cabforum.org/mailman/listinfo/public</font></tt></a><tt><font size=2><br>
</font></tt>
<br>