<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:ZH-CN;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma",sans-serif;
mso-fareast-language:ZH-CN;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:ZH-CN;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma",sans-serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="SK" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:EN-US">Disig votes YES<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:EN-US">Peter Miskovic<o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>Dean Coclin<br>
<b>Sent:</b> Monday, September 14, 2015 9:11 PM<br>
<b>To:</b> public@cabforum.org<br>
<b>Subject:</b> [cabfpub] Ballot 151<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Due to the confusion as to the voting period on ballot 150, it failed for lack of quorum. We are therefore submitting this as a new ballot. The discussion period begins today followed by voting per the schedule below.
We believe we have captured all the comments but if you have others, please feel free to remark.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span lang="EN-US">Ballot 151- Revised Addition of Optional OIDs for Indicating Level of Validation</span></b><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> The following motion has been proposed by Dean Coclin of Symantec and endorsed by Jeremy Rowley of Digicert and Kirk Hall of Trend Micro.<span style="color:#1F497D"><o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">-- MOTION BEGINS –<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt"><span lang="EN-US">1)</span><span lang="EN-US" style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span lang="EN-US">Modify section 1.2 of Baseline Requirements as follows:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US">1.2 Document Name and Identification</span></b><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">This certificate policy (CP) contains the requirements for the issuance and management of publicly$B!>(Btrusted SSL certificates, as adopted by the CA/Browser Forum.
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The following Certificate Policy identifiers are reserved for use by CAs as an optional means of asserting compliance with this CP (OID arc 2.23.140.1.2) as follows:
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2) domain$B!>(Bvalidated(1)} (2.23.140.1.2.1);
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2) organization-validated(2)} (2.23.140.1.2.2) and<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><u><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(B requirements(2) individual-validated(3)} (2.23.140.1.2.3).<o:p></o:p></span></u></p>
<p class="MsoNormal" style="text-indent:36.0pt"><span lang="EN-US" style="color:#1F497D"> </span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt"><span lang="EN-US">2)</span><span lang="EN-US" style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span lang="EN-US">Modify section 7.1.6.1 of the Baseline Requirements as follows:<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span lang="EN-US">7.1.6.1. Reserved Certificate Policy Identifiers
</span></b><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">This section describes the content requirements for the Root CA, Subordinate CA, and Subscriber Certificates, as they relate to the identification of Certificate Policy.
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The following Certificate Policy identifiers are reserved for use by CAs as an optional means of asserting compliance with these Requirements as follows:
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2) domain$B!>(Bvalidated(1)} (2.23.140.1.2.1), if the Certificate complies with these Requirements but
lacks Subject Identity Information that is verified in accordance with either Section 3.2.2.1
<u>or Section 3.2.3</u>.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">If the Certificate asserts the policy identifier of 2.23.140.1.2.1, then it MUST NOT include organizationName, givenName, surname, streetAddress, localityName, stateOrProvinceName, or postalCode in the Subject field.
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2) organization-validated(2)} (2.23.140.1.2.2), if the Certificate complies with these Requirements
and includes Subject Identity Information that is verified in accordance with Section 3.2.2.1.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><u><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) baseline$B!>(Brequirements(2) individual-validated(3)} (2.23.140.1.2.3), if the Certificate complies with these Requirements
and includes Subject Identity Information that is verified in accordance with Section 3.2.3.<o:p></o:p></span></u></p>
<p class="MsoNormal"><u><span lang="EN-US"> <o:p></o:p></span></u></p>
<p class="MsoNormal"><span lang="EN-US">If the Certificate asserts the policy identifier of 2.23.140.1.2.2, then it MUST also include organizationName, localityName
<u>(to the extent such field is required under Section 7.1.4.2.2)</u>, stateOrProvinceName
<u>(to the extent such field is required under Section 7.1.4.2.2</u>), and countryName in the Subject field.
<u>If the Certificate asserts the policy identifier of 2.23.140.1.2.3, then it MUST also include (i) either organizationName or givenName and surname, (ii) localityName (to the extent such field is required under Section 7.1.4.2.2), (iii) stateOrProvinceName
(to the extent required under Section 7.1.4.2.2), and (iv) countryName in the Subject field.</u><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt"><span lang="EN-US">3)</span><span lang="EN-US" style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span lang="EN-US">Modify the definition of $B!H(BEV OID$B!I(B in the EV Guidelines as follows:<o:p></o:p></span></p>
<p class="MsoListParagraph"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US">EV OID</span></b><span lang="EN-US">: An identifying number, in the form of an $B!H(Bobject identifier,$B!I(B that is included in the certificatePolicies field of a certificate that: (i) indicates which CA policy statement relates
to that certificate, and (ii) <u>is either the CA/Browser Forum EV policy identifier or a policy identifier that</u>, by pre-agreement with one or more Application Software Supplier, marks the certificate as being an EV Certificate.<o:p></o:p></span></p>
<p class="MsoListParagraph"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt"><span lang="EN-US">4)</span><span lang="EN-US" style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span lang="EN-US">Modify Section 9.3.2 of the EV Guidelines as follows:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Each EV Certificate issued by the CA to a Subscriber MUST contain a policy identifier
<u>that is either</u> defined by <u>these Guidelines or </u>the CA in the certificate$B!G(Bs certificatePolicies extension that: (i) indicates which CA policy statement relates to that Certificate, (ii) asserts the CA$B!G(Bs adherence to and compliance with these Guidelines,
and (iii), <u>is either the CA/Browser Forum$B!G(Bs EV policy identifier or a policy identifier that,
</u>by pre-agreement with the Application Software Supplier, marks the Certificate as being an EV Certificate.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><u><span lang="EN-US">The following Certificate Policy identifier is the CA/Browser Forum$B!G(Bs EV policy identifier:
<o:p></o:p></span></u></p>
<p class="MsoNormal"><u><span lang="EN-US">{joint$B!>(Biso$B!>(Bitu$B!>(Bt(2) international$B!>(Borganizations(23) ca$B!>(Bbrowser$B!>(Bforum(140) certificate$B!>(Bpolicies(1) ev-guidelines (1) } (2.23.140.1.1), if the Certificate complies with these Guidelines.<o:p></o:p></span></u></p>
<p class="MsoNormal"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">If the ballot passes, the custodian of the Forum OIDs will be instructed to obtain the new OID for IV as indicated above.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">-- MOTION ENDS –<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The review period for this ballot shall commence at 2200 UTC on Monday, September 14, 2015, and will close at 2200 UTC on Monday, September 21, 2015. Unless the motion is withdrawn during the review period, the voting
period will start immediately thereafter and will close at 2200 UTC on Monday, September 28, 2015. Votes must be cast by posting an on-list reply to this thread.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A vote in favor of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses
will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted. Voting members are listed here: <a href="https://cabforum.org/members/"><span style="color:windowtext">https://cabforum.org/members/</span></a><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor. Quorum is currently
nine (9) members– at least nine members must participate in the ballot, either by voting in favor, voting against, or abstaining.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Dean Coclin<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Chair CA/B Forum<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>