<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:365643503;
mso-list-type:hybrid;
mso-list-template-ids:-145966804 -2122968028 818999044 720020586 -142180730 1507632750 1424765972 704144182 -1922541662 1162370076;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1
{mso-list-id:1841113390;
mso-list-type:hybrid;
mso-list-template-ids:703463424 67698703 818999044 720020586 -142180730 1507632750 1424765972 704144182 -1922541662 1162370076;}
@list l1:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\2022;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Arial",sans-serif;
mso-bidi-font-family:"Times New Roman";}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><b>As requested on today’s call, please publish ahead of time any background reading material for a topic which has your name next to it.<o:p></o:p></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On Day 2 the subject topic is scheduled. Here is some background:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>At the last F2F meeting we discussed what should go in the certificate “O” field and what the definition of “applicant” should be. Ryan succinctly summarized it and I transformed into the following example:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Who can request a cert for dean.example.com:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><ol style='margin-top:0in' start=1 type=1><li class=MsoNormal style='mso-list:l1 level1 lfo2'>Dean Coclin, author of the content and logical operator of the <u>dean.example.com</u> origin<o:p></o:p></li><li class=MsoNormal style='mso-list:l1 level1 lfo2'>Example.com, provider of hosting services for Dean Coclin<o:p></o:p></li><li class=MsoNormal style='mso-list:l1 level1 lfo2'>CDN Corp, a CDN that provides SSL/TLS front-end services for <u>example.com</u>, which does not offer them directly<o:p></o:p></li><li class=MsoNormal style='mso-list:l1 level1 lfo2'>Marketing Inc, the firm responsible for designing and maintaining the website on behalf of Dean Coclin<o:p></o:p></li><li class=MsoNormal style='mso-list:l1 level1 lfo2'>Payments LLC, the payment processing firm responsible for handling orders and financial details on <u>dean.example.com</u><o:p></o:p></li><li class=MsoNormal style='mso-list:l1 level1 lfo2'>DNS Org, the company who operates the DNS services on behalf of Dean Coclin<o:p></o:p></li><li class=MsoNormal style='mso-list:l1 level1 lfo2'>Mail Corp, the organization who handles the MX records that dean.example.com responds to<o:p></o:p></li></ol><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>At the last meeting, there was a debate between some who thought it should be #1 and those that thought it should be whoever holds the private key. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My position (and those of some others at the meeting) is that it should be #1. The rationale is that this is what is of interest to relying parties. I don’t believe relying parties care who holds the private key nor who the site’s payment processor or DNS operator are. Relying parties want to know who is responsible for the site content and, in case of problems, who they should contact. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I would like to open and continue a discussion of this topic (at the meeting, not here)so that we can try and come to some consensus on this issue. Of course, if you have a viewpoint that you’d like to elaborate ahead of time, please feel free to do so.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks<o:p></o:p></p><p class=MsoNormal>Dean<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>