<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Dec 15, 2016, at 2:26 PM, Ryan Sleevi via Public <<a href="mailto:public@cabforum.org" class="">public@cabforum.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div dir="ltr" class=""><br class=""><div class="gmail_extra"><br class=""><div class="gmail_quote">On Thu, Dec 15, 2016 at 2:05 PM, Dean Coclin via Public <span dir="ltr" class=""><<a href="mailto:public@cabforum.org" target="_blank" class="">public@cabforum.org</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple" class=""><div class="m_-2653582816152584961WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class="">The below was written by FD and I am posting on their behalf:<u class=""></u><u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class=""><u class=""></u> <u class=""></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d" class="">When we requested our certificates previously, there was general acknowledgment in the forum that December 31 was the most difficult time for these certificates to expire. Even so, our request was limited so that the certificates were set to expire at this time and others were extended into 2017. The only justification for the difference in treatment was unrelated to the application itself. We believe that the coordinated decision to grant different extension dates was inappropriate for the members of the CA/B Forum who are competing entities acting as a standards setting organization. This individualized decision effectively prevents merchants from reaching one provider over another.</span></p></div></div></blockquote><div class=""><br class=""></div><div class="">To be clear: The CA/Browser Forum does not grant exceptions. Individual root stores do. And if a *single* root store disagrees to accept such a change, a CA issuing such a cert does so at their own peril of being removed from that root store for non-compliance with that root store.</div><div class=""><br class=""></div><div class="">So the suggestion of coordination is both factually and materially incorrect and misleading, based on a misunderstanding of the exception process. </div></div></div></div></div></blockquote><br class=""></div><div>It is also worth noting that not all root stores are represented in the Forum. Even of those that are, some have explicitly stated that they don’t want to use a public discussion list as the venue to handle these requests; they want direct contact from the CA.</div></body></html>