<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
HARICA votes "yes" for ballot 171.<br>
<br>
Dimitris.<br>
<br>
<blockquote cite="mid:57723EC6.50603@startcom.org" type="cite"> <br>
<div class="moz-cite-prefix">On 06/24/2016 06:56 PM, Ben Wilson
wrote:<br>
</div>
<blockquote
cite="mid:a7b1c7e90b264d338c6c3a9e940dd2bf@EX2.corp.digicert.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:TimesNewRomanPSMT;}
@font-face
{font-family:"Times New Roman \,serif";}
@font-face
{font-family:SymbolMT;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Segoe UI",sans-serif;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.Textodeglobo, li.Textodeglobo, div.Textodeglobo
{mso-style-name:"Texto de globo";
mso-style-link:"Texto de globo Car";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma",sans-serif;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 85.05pt 70.85pt 85.05pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">I’ve updated the text in GitHub and in so
doing made a few minor grammatical changes to the proposed
revision of section 17.4 of the EV Guidelines so that it
would read as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">(4) If the CA does not have a currently
valid WebTrust Seal of Assurance for CAs or an ETSI TS 102
042 EVCP audit or an ETSI EN 319 411-1 audit for EVCP
policy, then, before issuing EV Certificates, the CA and its
Root CA MUST successfully complete either: (i) a
point-in-time readiness assessment audit against the
WebTrust for CA Program, or (ii) a point-in-time readiness
assessment audit against the WebTrust EV Program, the ETSI
TS 102 042 EVCP, or the ETSI EN 319 411-1 for EVCP policy. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">IMHO – I think we could start voting on
the revised ballot at 2200 UTC because the changes to the
language have been relatively minor since the ballot was
released last week.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ben<o:p></o:p></p>
<p class="MsoNormal"><a moz-do-not-send="true"
name="_MailEndCompose"><o:p> </o:p></a></p>
<span style="mso-bookmark:_MailEndCompose"></span>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> <a
moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:public-bounces@cabforum.org"><a class="moz-txt-link-abbreviated" href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a></a>
[<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Barreira Iglesias, Iñigo<br>
<b>Sent:</b> Friday, June 24, 2016 4:47 AM<br>
<b>To:</b> '<a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:public@cabforum.org">public@cabforum.org</a>'
<a moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="mailto:public@cabforum.org"><public@cabforum.org></a><br>
<b>Subject:</b> [cabfpub] ballot 171-updating ETSI
Standards in CABF documents<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi,<o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p> </o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">This
is how the ballot will look like accepting the changes
proposed by Erwann. As this has been done during the review
period, and then the changes accepted during this period,
would be enough to resubmit again as it is, or should we go
thru another review period of 1 week. I´m not familiar with
the procedure so if it´s ok as it´s now, the voting period
will start tonight I think.<o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Regards<o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p> </o:p></p>
<p><strong>Ballot 171 – Updating the ETSI standards in the
CABF documents</strong><o:p></o:p></p>
<p>The following motion has been proposed by Iñigo Barreira of
Izenpe and endorsed by Mads Henriksveen of Buypass, Jochem
van den Berge of Logius PKIoverheid and Arno Fiedler of
D-trust <o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p> </o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">--
MOTION BEGINS – <o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>In
the BRs,</b><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">In
section 1.6.3 References, change:<o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Cambria",serif">ETSI
TS 119 403, Electronic Signatures and Infrastructures
(ESI); Trust Service Provider Conformity Assessment ‐
General Requirements and Guidance.</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">With<span
style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal">ETSI EN 319 403, Electronic Signatures
and Infrastructures (ESI); Trust Service Provider Conformity
Assessment - Requirements for conformity assessment bodies
assessing Trust Service Providers<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">and add:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">ETSI EN 319 411-1, Electronic Signatures
and Infrastructures (ESI); Policy and security requirements
for Trust Service Providers issuing certificates;<o:p></o:p></p>
<p class="MsoNormal">Part 1: General requirements<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">In
section 8.2 Identity/qualification of assessor, point 4,
change:<span style="font-size:12.0pt;font-family:"Times
New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">4.
(For audits conducted in accordance with any one of the
ETSI standards) accredited in accordance with ETSI TS 119
403, or accredited to conduct such audits under an
equivalent national scheme, or accredited by a national
accreditation body in line with ISO 27006 to carry out ISO
27001 audits;</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.5pt">With</span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">4.
(For audits conducted in accordance with any one of the
ETSI standards) </span><span
style="font-family:"Times New Roman \,serif"">accredited
in accordance with ISO 17065 applying the requirements
specified in ETSI EN 319 403</span><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">;</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">In
section 8.4 Topics covered by assessment, point 2, change:<span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">2.
A national scheme that audits conformance to ETSI TS 102
042;</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:11.5pt;font-family:"Helvetica",sans-serif">With</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">2.
A national scheme that audits conformance to ETSI TS 102
042/ ETSI EN 319 411-1; </span><o:p></o:p></p>
<p class="MsoNormal"><b>In the EV guidelines,</b><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">In section 8.2.1 Implementation, point
(B), change:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(B)</span><span
style="font-size:10.0pt;font-family:Symbol"> </span><span
style="font-size:10.0pt;font-family:SymbolMT"> </span><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">Implement
the requirements of (i) the then-current WebTrust Program
for CAs, and (ii) the then-current WebTrust</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">EV
Program or ETSI TS 102 042; and</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.5pt">With</span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(B)</span><span
style="font-size:10.0pt;font-family:Symbol"> </span><span
style="font-size:10.0pt;font-family:SymbolMT"> </span><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">Implement
the requirements of (i) the then-current WebTrust Program
for CAs, and (ii) the then-current WebTrust</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">EV
Program or ETSI TS 102 042 for EVCP or ETSI EN 319 411-1
for EVCP policy; and</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal">In section 8.2.2 Disclosure, change:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">The
CA is also REQUIRED to publicly disclose its CA business
practices as required by both WebTrust for CAs and ETSI TS
102 042.</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.5pt">With</span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">The
CA is also REQUIRED to publicly disclose its CA business
practices as required by WebTrust for CAs and ETSI TS 102
042 and ETSI EN 319 411-1.</span><span
style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">In section 17.1 Eligible audit schemes,
point (ii), change:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(ii)
ETSI TS 102 042 audit</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.5pt">With</span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(ii)
ETSI TS 102 042 audit for EVCP, or </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(iii)
ETSI EN 319 411-1 audit for EVCP policy</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">In section 17.4 pre-issuance readiness
audit, after point (2), add:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(3)
If the CA has a currently valid ETSI EN 319 411-1 audit
for EVCP policy, then, before issuing EV Certificates, the
CA and its Root CA MUST successfully complete a
point-in-time readiness assessment audit against ETSI EN
319 411-1 for EVCP.</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.5pt">and
change:</span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(3)
If the CA does not have a currently valid WebTrust Seal of
Assurance for CAs or an ETSI 102 042 audit, then, before</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">issuing
EV Certificates, the CA and its Root CA MUST successfully
complete either: (i) a point-in-time readiness</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">assessment
audit against the WebTrust for CA Program, or (ii) a
point-in-time readiness assessment audit against the</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">WebTrust
EV Program, or an ETSI TS 102 042 audit.</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.5pt">With</span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT"> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:TimesNewRomanPSMT">(4)
If the CA does not have a currently valid WebTrust Seal of
Assurance for CAs or or an ETSI TS 102 042 EVCP or an ETSI
EN 319 411-1 audit for EVCP policy, then, before issuing
EV Certificates, the CA and its Root CA MUST successfully
complete either: (i) a point-in-time readiness assessment
audit against the WebTrust for CA Program, or (ii) a
point-in-time readiness assessment audit against the
WebTrust EV Program, or an ETSI TS 102 042 EVCP, or an
ETSI EN 319 411-1 for EVCP policy.</span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
lang="ES">-- MOTION ENDS -- </span><span
style="font-size:12.0pt;font-family:"Times New
Roman",serif" lang="ES"><o:p></o:p></span></p>
<p>The review period for this ballot shall commence at 2200
UTC on 17 June 2016, and will close at 2200 UTC on 24 June
2016. Unless the motion is withdrawn during the review
period, the voting period will start immediately thereafter
and will close at 2200 UTC on 1 July 2016. Votes must be
cast by posting an on-list reply to this thread. <o:p></o:p></p>
<p>A vote in favor of the motion must indicate a clear 'yes'
in the response. A vote against must indicate a clear 'no'
in the response. A vote to abstain must indicate a clear
'abstain' in the response. Unclear responses will not be
counted. The latest vote received from any representative of
a voting member before the close of the voting period will
be counted. Voting members are listed here: <a
moz-do-not-send="true"
href="https://cabforum.org/members/" target="_blank"><a class="moz-txt-link-freetext" href="https://cabforum.org/members/">https://cabforum.org/members/</a></a>
<o:p></o:p></p>
<p>In order for the motion to be adopted, two thirds or more
of the votes cast by members in the CA category and greater
than 50% of the votes cast by members in the browser
category must be in favor. Quorum is currently ten (10)
members– at least ten members must participate in the
ballot, either by voting in favor, voting against, or
abstaining. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p><br>
</p>
</div>
</blockquote>
</blockquote>
<br>
</body>
</html>