<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<div>
<div>
<div style="font-family:Calibri,sans-serif; font-size:11pt">That is fine with me. How do others feel about that suggested language?<br>
</div>
</div>
<div dir="ltr">
<hr>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">From:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt"><a href="mailto:sigbjorn@opera.com">Sigbjørn Vik</a></span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">Sent:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt">1/6/2016 2:14 AM</span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">To:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt"><a href="mailto:public@cabforum.org">public@cabforum.org</a></span><br>
<span style="font-family:Calibri,sans-serif; font-size:11pt; font-weight:bold">Subject:
</span><span style="font-family:Calibri,sans-serif; font-size:11pt">Re: [cabfpub] Ballot 159 - Amend Section 4 of Baseline Requirements</span><br>
<br>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">In this case, perhaps the language should match the language used in<br>
section 9.6.3? In general, the BRs impose restrictions on CAs, not<br>
subscribers, and there are no effects if subscribers flaunt the BRs.<br>
Stating "subscribers SHALL" does thus not achieve the intended purpose.<br>
Perhaps language like the following instead:<br>
<br>
"The CA SHALL ensure that subscribers commit to subsections 2. and 4. of<br>
section 9.6.3."<br>
<br>
Although in that case, why not simply the following instead:<br>
<br>
"See section 9.6.3, provisions 2. and 4."<br>
<br>
<br>
On 05-Jan-16 17:02, Ben Wilson wrote:<br>
> It should have said:<br>
> <br>
> <br>
> <br>
> “3) In Section 4.5.1 of the Baseline Requirements, add "Subscribers<br>
> SHALL comply with subsections 2. and 4. of Section 9.6.3.”<br>
> <br>
> <br>
> <br>
> Those two subsections are in the Subscriber Agreement requirements. <br>
> Subsection 2. says, “Protection of Private Key: An obligation and<br>
> warranty by the Applicant to take all reasonable measures to maintain<br>
> sole control of, keep confidential, and properly protect at all times<br>
> the Private Key that corresponds to the Public Key to be included in the<br>
> requested Certificate(s) (and any associated activation data or device,<br>
> e.g. password or token);” Subsection 4. says, “Use of Certificate: An<br>
> obligation and warranty to install the Certificate only on servers that<br>
> are accessible at the subjectAltName(s) listed in the Certificate, and<br>
> to use the Certificate solely in compliance with all applicable laws and<br>
> solely in accordance with the Subscriber or Terms of Use Agreement;”<br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> *From:* Rick Andrews [<a href="mailto:Rick_Andrews@symantec.com">mailto:Rick_Andrews@symantec.com</a>]<br>
> *Sent:* Monday, January 4, 2016 6:45 PM<br>
> *To:* Ben Wilson <ben.wilson@digicert.com>; CABFPub <public@cabforum.org><br>
> *Subject:* RE: Ballot 159 - Amend Section 4 of Baseline Requirements<br>
> <br>
> <br>
> <br>
> Ben,<br>
> <br>
> <br>
> <br>
> “3) In Section 4.5.1 of the Baseline Requirements, add "Subscribers<br>
> SHALL comply with Sections 4.9.3(2) and 4.9.3(4)."” I don’t see (2) and<br>
> (4) in 4.9.3. Is that the right Section number?<br>
> <br>
> <br>
> <br>
> -Rick<br>
> <br>
> <br>
> <br>
> *From:*public-bounces@cabforum.org <<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>><br>
> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] *On Behalf Of *Ben Wilson<br>
> *Sent:* Monday, January 04, 2016 8:04 AM<br>
> *To:* CABFPub<br>
> *Subject:* [cabfpub] Ballot 159 - Amend Section 4 of Baseline Requirements<br>
> <br>
> <br>
> <br>
> Ballot 159 - Amend Section 4 of Baseline Requirements<br>
> <br>
> <br>
> <br>
> The Policy Review Working Group has reviewed Section 4 of the Baseline<br>
> Requirements and, as a result, suggests that certain changes be made. <br>
> Based on the lack of urgency for these changes and other considerations,<br>
> the Working Group recommends that, if any compliance is required,<br>
> Certification Authorities be given until January 1, 2017 before they are<br>
> required to comply. Therefore, the following motion has been proposed<br>
> by Ben Wilson of DigiCert and endorsed by Tim Hollebeek of Trustwave<br>
> and Kirk Hall of TrendMicro:<br>
> <br>
> <br>
> <br>
> -- MOTION BEGINS --<br>
> <br>
> <br>
> <br>
> Effective immediately<br>
> <br>
> <br>
> <br>
> 1) In Sections 4.2.3, 4.3.2, 4.4.1, 4.4.2, 4.4.3, 4.5.2, 4.6.1, 4.6.2,<br>
> 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7., 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5,<br>
> 4.7.6, 4.7.7, 4.8.1, 4.8.2, 4.8.3, 4.8.4, 4.8.5, 4.8.6, 4.8.7, 4.9.4,<br>
> 4.9.8, 4.10.3, 4.11, and 4.12.1 of the Baseline Requirements, add "No<br>
> stipulation."<br>
> <br>
> <br>
> <br>
> 2) In Sections 4.9.14, 4.9.15, 4.9.16, and 4.12.2 of the Baseline<br>
> Requirements, add "Not applicable."<br>
> <br>
> <br>
> <br>
> 3) In Section 4.5.1 of the Baseline Requirements, add "Subscribers SHALL<br>
> comply with Sections 4.9.3(2) and 4.9.3(4)."<br>
> <br>
> <br>
> <br>
> 4) In Section 4.9.2 of the Baseline Requirements, add "The Subscriber<br>
> can initiate revocation. Other parties who can request revocation<br>
> include: the general public,<br>
> <br>
> the press/news media, or an Application Software Provider.<br>
> <br>
> See also Section 3.4."<br>
> <br>
> <br>
> <br>
> 5) In Section 4.9.6 of the Baseline Requirements, add "No stipulation.<br>
> <br>
> (Note: Following certificate issuance, a certificate may be revoked for<br>
> reasons stated in Section 4.9.1.<br>
> <br>
> Therefore, relying parties should check the revocation status of all<br>
> certificates that contain a CDP or OCSP<br>
> <br>
> pointer.)"<br>
> <br>
> <br>
> <br>
> To review these proposed changes in the Baseline Requirements, see the<br>
> attached PDF document titled, “Ballot- 159 Redlining of Section 4 of BRs” .<br>
> <br>
> <br>
> <br>
> -- MOTION ENDS --<br>
> <br>
> <br>
> <br>
> The review period for this ballot shall commence at 2200 UTC on 4<br>
> January 2016, and will close at 2200 UTC on 11 January 2016. Unless the<br>
> motion is withdrawn during the review period, the voting period will<br>
> start immediately thereafter and will close at 2200 UTC on 18 January<br>
> 2016. Votes must be cast by posting an on-list reply to this thread.<br>
> <br>
> <br>
> <br>
> A vote in favor of the motion must indicate a clear 'yes' in the<br>
> response. A vote against must indicate a clear 'no' in the response. A<br>
> vote to abstain must indicate a clear 'abstain' in the response. Unclear<br>
> responses will not be counted. The latest vote received from any<br>
> representative of a voting member before the close of the voting period<br>
> will be counted. Voting members are listed here:<br>
> <a href="https://cabforum.org/members/">https://cabforum.org/members/</a><br>
> <br>
> <br>
> <br>
> In order for the motion to be adopted, two thirds or more of the votes<br>
> cast by members in the CA category and greater than 50% of the votes<br>
> cast by members in the browser category must be in favor. Quorum is<br>
> currently nine (9) members– at least nine members must participate in<br>
> the ballot, either by voting in favor, voting against, or abstaining.<br>
> <br>
> <br>
> <br>
> _______________________________________________<br>
> Public mailing list<br>
> Public@cabforum.org<br>
> <a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><br>
> <br>
<br>
<br>
-- <br>
Sigbjørn Vik<br>
Opera Software<br>
_______________________________________________<br>
Public mailing list<br>
Public@cabforum.org<br>
<a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><br>
</div>
</span></font>
</body>
</html>