<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 21/4/2016 4:07 πμ, Jacob
Hoffman-Andrews wrote:<br>
</div>
<blockquote
cite="mid:CAN3x4QnWEUgbk4gobLMW706x1pOeKtx76LcjTMcmyP=yhTEF7w@mail.gmail.com"
type="cite">
<div dir="ltr">I think the question of how to define entropy or
CSPRNGs is a really good one, but I think the core of this
ballot, changing a SHOULD to a SHALL, is too important to hold
up on that complex question. How about a version which is
strictly no more ambiguous that the current version:
<div>
<p style="font-size:12.8px">"Effective April 1, 2016, CAs
SHALL use a Certificate serialNumber greater than zero (0)
that exhibits at least 64 bits of entropy."</p>
<p style="font-size:12.8px">Let's Encrypt would be happy to
endorse such a ballot.</p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
In order to make this rule a little clearer, we suggest changing it
to:<br>
<br>
"Effective XXXX, 2016, CAs SHALL use a Certificate serialNumber
greater than zero (0) that exhibits at least 64 bits of entropy for
all issued certificates, including CA certificates".<br>
<br>
Since this discussion begun in February, I suppose the effective
date will be adjusted accordingly to a date after the ballot and not
"April 1, 2016".<br>
<br>
<br>
Dimitris.<br>
</body>
</html>