<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>With the tentative endorsements by Trend and Mozilla, the ballot reads as follows:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal>Background:<o:p></o:p></p><p class=MsoNormal>Section 2.1 (a)(1) says that Issuing CAs “actively issue certificates to Web servers…”<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Section 2.1(b) of the bylaws lists the items needed in a membership application by CAs. <o:p></o:p></p><p class=MsoNormal>But that section does not ask the CA applicant to provide a 3<sup>rd</sup> party website where the CA/B Forum can validate that they are actively issuing certs to web servers. We do however ask the applicant this question, after they have submitted their application. It would be helpful to have this in the bylaws so we don’t have to go back and ask every time.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Specific change:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Add under 2.1(b) <o:p></o:p></p><p class=MsoNormal>(7) The URL of at least one third party website that <s>is using</s> <span style='color:#1F497D'>includes </span>a certificate <s>from</s> <span style='color:#1F497D'>issued by </span>the <span style='color:#1F497D'>Applicant</span> <s>CA</s> <s>which can be examined by Forum members<span style='color:#1F497D'> </span></s><span style='color:#1F497D'>in the certificate chain.</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Any other comments?<br><br>Dean<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Dean Coclin<br><b>Sent:</b> Thursday, March 17, 2016 11:29 AM<br><b>To:</b> CABFPub <public@cabforum.org><br><b>Subject:</b> [cabfpub] Pre-ballot on membership requirement update<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am looking for 2 endorsers for the following:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Background:<o:p></o:p></p><p class=MsoNormal>Section 2.1 (a)(1) says that Issuing CAs “actively issue certificates to Web servers…”<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Section 2.1(b) of the bylaws lists the items needed in a membership application by CAs. <o:p></o:p></p><p class=MsoNormal>But that section does not ask the CA applicant to provide a 3<sup>rd</sup> party website where the CA/B Forum can validate that they are actively issuing certs to web servers. We do however ask the applicant this question, after they have submitted their application. It would be helpful to have this in the bylaws so we don’t have to go back and ask every time.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Specific change:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Add under 2.1(b) <o:p></o:p></p><p class=MsoNormal>(7) The URL of at least one third party website that <s>is using</s> <span style='color:#1F497D'>includes </span>a certificate <s>from</s> <span style='color:#1F497D'>issued by </span>the <span style='color:#1F497D'>Applicant</span> <s>CA</s> <s>which can be examined by Forum members<span style='color:#1F497D'> </span></s><span style='color:#1F497D'>in the certificate chain.</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks,<br>Dean<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>