<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:TimesNewRomanPSMT;}
@font-face
{font-family:"Times New Roman \,serif";}
@font-face
{font-family:SymbolMT;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Segoe UI",sans-serif;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.Textodeglobo, li.Textodeglobo, div.Textodeglobo
{mso-style-name:"Texto de globo";
mso-style-link:"Texto de globo Car";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma",sans-serif;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 85.05pt 70.85pt 85.05pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>I’ve updated the text in GitHub and in so doing made a few minor grammatical changes to the proposed revision of section 17.4 of the EV Guidelines so that it would read as follows:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>(4) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or an ETSI TS 102 042 EVCP audit or an ETSI EN 319 411-1 audit for EVCP policy, then, before issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the WebTrust EV Program, the ETSI TS 102 042 EVCP, or the ETSI EN 319 411-1 for EVCP policy. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>IMHO – I think we could start voting on the revised ballot at 2200 UTC because the changes to the language have been relatively minor since the ballot was released last week.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ben<o:p></o:p></p><p class=MsoNormal><a name="_MailEndCompose"><o:p> </o:p></a></p><span style='mso-bookmark:_MailEndCompose'></span><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Barreira Iglesias, Iñigo<br><b>Sent:</b> Friday, June 24, 2016 4:47 AM<br><b>To:</b> 'public@cabforum.org' <public@cabforum.org><br><b>Subject:</b> [cabfpub] ballot 171-updating ETSI Standards in CABF documents<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Hi,<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>This is how the ballot will look like accepting the changes proposed by Erwann. As this has been done during the review period, and then the changes accepted during this period, would be enough to resubmit again as it is, or should we go thru another review period of 1 week. I´m not familiar with the procedure so if it´s ok as it´s now, the voting period will start tonight I think.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Regards<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><o:p> </o:p></p><p><strong>Ballot 171 – Updating the ETSI standards in the CABF documents</strong><o:p></o:p></p><p>The following motion has been proposed by Iñigo Barreira of Izenpe and endorsed by Mads Henriksveen of Buypass, Jochem van den Berge of Logius PKIoverheid and Arno Fiedler of D-trust <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>-- MOTION BEGINS – <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b>In the BRs,</b><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>In section 1.6.3 References, change:<o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Cambria",serif'>ETSI TS 119 403, Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment ‐ General Requirements and Guidance.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>With<span style='font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal>ETSI EN 319 403, Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment - Requirements for conformity assessment bodies assessing Trust Service Providers<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>and add:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>ETSI EN 319 411-1, Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates;<o:p></o:p></p><p class=MsoNormal>Part 1: General requirements<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>In section 8.2 Identity/qualification of assessor, point 4, change:<span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>4. (For audits conducted in accordance with any one of the ETSI standards) accredited in accordance with ETSI TS 119 403, or accredited to conduct such audits under an equivalent national scheme, or accredited by a national accreditation body in line with ISO 27006 to carry out ISO 27001 audits;</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.5pt'>With</span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in'><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>4. (For audits conducted in accordance with any one of the ETSI standards) </span><span style='font-family:"Times New Roman \,serif"'>accredited in accordance with ISO 17065 applying the requirements specified in ETSI EN 319 403</span><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>;</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in'><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>In section 8.4 Topics covered by assessment, point 2, change:<span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>2. A national scheme that audits conformance to ETSI TS 102 042;</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif'>With</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>2. A national scheme that audits conformance to ETSI TS 102 042/ ETSI EN 319 411-1; </span><o:p></o:p></p><p class=MsoNormal><b>In the EV guidelines,</b><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>In section 8.2.1 Implementation, point (B), change:<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(B)</span><span style='font-size:10.0pt;font-family:Symbol'> </span><span style='font-size:10.0pt;font-family:SymbolMT'> </span><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>Implement the requirements of (i) the then-current WebTrust Program for CAs, and (ii) the then-current WebTrust</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>EV Program or ETSI TS 102 042; and</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.5pt'>With</span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(B)</span><span style='font-size:10.0pt;font-family:Symbol'> </span><span style='font-size:10.0pt;font-family:SymbolMT'> </span><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>Implement the requirements of (i) the then-current WebTrust Program for CAs, and (ii) the then-current WebTrust</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>EV Program or ETSI TS 102 042 for EVCP or ETSI EN 319 411-1 for EVCP policy; and</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal>In section 8.2.2 Disclosure, change:<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>The CA is also REQUIRED to publicly disclose its CA business practices as required by both WebTrust for CAs and ETSI TS 102 042.</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.5pt'>With</span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>The CA is also REQUIRED to publicly disclose its CA business practices as required by WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.</span><span style='font-size:12.0pt'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>In section 17.1 Eligible audit schemes, point (ii), change:<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(ii) ETSI TS 102 042 audit</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.5pt'>With</span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(ii) ETSI TS 102 042 audit for EVCP, or </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(iii) ETSI EN 319 411-1 audit for EVCP policy</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>In section 17.4 pre-issuance readiness audit, after point (2), add:<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(3) If the CA has a currently valid ETSI EN 319 411-1 audit for EVCP policy, then, before issuing EV Certificates, the CA and its Root CA MUST successfully complete a point-in-time readiness assessment audit against ETSI EN 319 411-1 for EVCP.</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.5pt'>and change:</span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(3) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or an ETSI 102 042 audit, then, before</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>WebTrust EV Program, or an ETSI TS 102 042 audit.</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.5pt'>With</span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:TimesNewRomanPSMT'>(4) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or or an ETSI TS 102 042 EVCP or an ETSI EN 319 411-1 audit for EVCP policy, then, before issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the WebTrust EV Program, or an ETSI TS 102 042 EVCP, or an ETSI EN 319 411-1 for EVCP policy.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=ES>-- MOTION ENDS -- </span><span lang=ES style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p><p>The review period for this ballot shall commence at 2200 UTC on 17 June 2016, and will close at 2200 UTC on 24 June 2016. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2200 UTC on 1 July 2016. Votes must be cast by posting an on-list reply to this thread. <o:p></o:p></p><p>A vote in favor of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted. Voting members are listed here: <a href="https://cabforum.org/members/" target="_blank">https://cabforum.org/members/</a> <o:p></o:p></p><p>In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor. Quorum is currently ten (10) members– at least ten members must participate in the ballot, either by voting in favor, voting against, or abstaining. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='mso-fareast-language:ES'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:ES'>Iñigo Barreira</span></b><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:ES'><br>Responsable del Área técnica<br><a href="mailto:i-barreira@izenpe.eus">i-barreira@izenpe.eus</a> <o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:ES'>945067705</span><span lang=ES-TRAD style='color:#1F497D;mso-fareast-language:ES'><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='mso-fareast-language:ES'><o:p> </o:p></span></p><p class=MsoNormal><span lang=ES style='color:navy;mso-fareast-language:ES'><img border=0 width=589 height=99 style='width:6.1375in;height:1.0333in' id="Imagen_x0020_1" src="cid:image002.jpg@01D1CDFE.AB77D6C0" alt="Descripción: firma_email_Izenpe_eus"><o:p></o:p></span></p><p class=MsoNormal><span lang=ES-TRAD style='mso-fareast-language:ES'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:9.75pt'><span lang=ES style='font-size:7.5pt;font-family:"Tahoma",sans-serif;color:#888888;mso-fareast-language:ES-TRAD'>ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span lang=ES style='color:#888888;mso-fareast-language:ES-TRAD'><br></span><span lang=ES style='font-size:7.5pt;font-family:"Tahoma",sans-serif;color:#888888;mso-fareast-language:ES-TRAD'>ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span lang=ES style='font-size:12.0pt;color:navy;mso-fareast-language:ES-TRAD'><o:p></o:p></span></p><p class=MsoNormal><span lang=ES><o:p> </o:p></span></p></div></body></html>