<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Droid Sans";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Reviewing the mins from meeting 35 (which I vividly recall chairing), I note:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;background:white">
<span style="font-size:10.0pt;font-family:"Droid Sans";color:#333333">Ryan proposed annual revetting for domain and every second year for organization. Do domain revalidation every year in case the domain has ceased. If something changes, you have to revoke
that certificate.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;background:white">
<span style="font-size:10.0pt;font-family:"Droid Sans";color:#333333">If I want to be evil and shady, I can block revocation information for users accessing the site. Revocation checking that doesn’t work makes a longer certificate validity period a higher
risk. 2 years lifetime constrains the upper bounds. Pushing out to 3 year potentially means that the certificate no longer properly warrants who the domain holder is. Decreased validity periods or requirement for OCSP stapling could fix that (or we could fix
the revocation problem).<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;background:white">
<span style="font-size:10.0pt;font-family:"Droid Sans";color:#333333">Ryan is concerned with domain revalidation when change of domain ownership takes place. If I sell you sleevie.com I can still get certificates for it the next 39 months.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;background:white">
<span style="font-size:10.0pt;font-family:"Droid Sans";color:#333333">This goes back to what we are trying to do with CT – if we buy sleevie.com we would like to know what certificates are out there lurking. CT is talking about what happened in the past.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;background:white">
<span style="font-size:10.0pt;font-family:"Droid Sans";color:#333333">The CAs in this room to pretty interesting experiments on how to do domain control validation. It could be a trade off, do the identity validation for longer periods and then the domain control
validation for a much shorter period.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;background:white">
<span style="font-size:10.0pt;font-family:"Droid Sans";color:#333333">Different proposals for certificate validity periods came up based on different arguments:<o:p></o:p></span></p>
<table class="MsoNormalTable" border="1" cellpadding="0" width="100%" style="width:100.0%;background:#F9F9F9;border:solid #DFDFDF 1.0pt">
<tbody>
<tr>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">Type<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">Today<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">Tim<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">Wayne<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">Ryan<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">Eddy<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">NN<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">DV</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555"><o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">1<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">1<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">OV</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555"><o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">EV</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555"><o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">2<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
<td valign="top" style="border-top:solid white 1.0pt;border-left:none;border-bottom:solid #DFDFDF 1.0pt;border-right:none;padding:3.0pt 5.25pt 3.0pt 5.25pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#555555">3<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Ryan-your proposal at the time was a 2 year max validity for all certs. What specifically has changed your thinking since the meeting? Is it just, shorter is
better?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Also, the ballot has an implementation of less than 4 months from now. With CAs working on CT for all cert types, vetting changes and likely CAA, roadmaps are
filled for probably several quarters. Given the prior lead time given for CT for EV was longer, I’m surprised that there is a belief this can be accomplished in 4 months.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Lastly, a large amount of customers request 2-3 year certs, not because the CA wants to “lock them in” but because their applications or business processes are
set up that way. Sure, we as partners in the ecosystem can effect changes but not in 4 months.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">A major change like this requires a broader user input which isn’t going to happen on this list. Several CAs have started polling their customers for data and
it will take some time to gather and present this. I suggest we set as a goal, a presentation at the March F2F by as many CAs that can gather data.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><br>
Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></a></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Public [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>Ryan Sleevi via Public<br>
<b>Sent:</b> Saturday, February 4, 2017 8:25 AM<br>
<b>To:</b> Eric Mill <eric@konklone.com><br>
<b>Cc:</b> Ryan Sleevi <sleevi@google.com>; CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Subject:</b> Re: [cabfpub] Draft Ballot 185 - Limiting the Lifetime of Certificates<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, Feb 3, 2017 at 8:02 PM, Eric Mill <<a href="mailto:eric@konklone.com" target="_blank">eric@konklone.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">This ballot (to me, anyway) came out of nowhere without any prior discussion focused on a potential ballot, and it's a big change from the status quo on the CA side, so I can understand why it's caused a strong reaction. <o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Just for context, past discussions include<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://clicktime.symantec.com/a/1/2J2vVzuTNL0xJNtWomo0Q9aDstwhBAW41fJQJvIpcG8=?d=O15yK2tZr6IM_dP9P3FpuBMSGvoEh4HOKvSAmyrqaHYpKRrsnEhlYMrvjIsh8q-cEHPRfGc_PrIIi9xB9nbFWngRQmtApZ_z3rHxvXYKLhRqrh5f-jTZbvcxcHNyRUNk1aOMC-9rzlAZP-RrxZomvnc7feubxYIuHn-F3_gmhhcCsrfiFLy_9rLTb2ZJmBPGK-JaolqMvSW7nMAtGBa8TLX_7sRg8YCjga5S_oFwiKGZkHNhnuLc2jIU52MC7NiB5eDNmRbKyWuP9ECUMAZwkCB6fURT3ekEbwGFwJYcxtrZpNM7ahP2yJmsLUdPtnxT1HbnOmnTh9qa59E4tNKwm-NqvMNK1QBpU6wYjYaR7R1ZkyNG9xjNBZr0eFLwye87VUNCbnN6g8UBkyJu1KDcgphvMG6ncN8cl_5VJybkCsx98aRf40xDhmKAaCLI4rGCzGJnx72LRxM%3D&u=https%3A%2F%2Fcabforum.org%2Fpipermail%2Fpublic%2F2016-March%2F007106.html">https://cabforum.org/pipermail/public/2016-March/007106.html</a><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><a href="https://clicktime.symantec.com/a/1/uMRTtdYtQEmN8QXQOKN7J3xTVj-VB6vlIdbbRP3oi-0=?d=O15yK2tZr6IM_dP9P3FpuBMSGvoEh4HOKvSAmyrqaHYpKRrsnEhlYMrvjIsh8q-cEHPRfGc_PrIIi9xB9nbFWngRQmtApZ_z3rHxvXYKLhRqrh5f-jTZbvcxcHNyRUNk1aOMC-9rzlAZP-RrxZomvnc7feubxYIuHn-F3_gmhhcCsrfiFLy_9rLTb2ZJmBPGK-JaolqMvSW7nMAtGBa8TLX_7sRg8YCjga5S_oFwiKGZkHNhnuLc2jIU52MC7NiB5eDNmRbKyWuP9ECUMAZwkCB6fURT3ekEbwGFwJYcxtrZpNM7ahP2yJmsLUdPtnxT1HbnOmnTh9qa59E4tNKwm-NqvMNK1QBpU6wYjYaR7R1ZkyNG9xjNBZr0eFLwye87VUNCbnN6g8UBkyJu1KDcgphvMG6ncN8cl_5VJybkCsx98aRf40xDhmKAaCLI4rGCzGJnx72LRxM%3D&u=https%3A%2F%2Fcabforum.org%2F2016%2F02%2F17%2F2016-02-17-minutes-of-f2f-meeting-37%2F">https://cabforum.org/2016/02/17/2016-02-17-minutes-of-f2f-meeting-37/</a><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><a href="https://clicktime.symantec.com/a/1/zZD0rUu3osOhMrDcFp946aizPQrNLkVM_aCNqUeqPco=?d=O15yK2tZr6IM_dP9P3FpuBMSGvoEh4HOKvSAmyrqaHYpKRrsnEhlYMrvjIsh8q-cEHPRfGc_PrIIi9xB9nbFWngRQmtApZ_z3rHxvXYKLhRqrh5f-jTZbvcxcHNyRUNk1aOMC-9rzlAZP-RrxZomvnc7feubxYIuHn-F3_gmhhcCsrfiFLy_9rLTb2ZJmBPGK-JaolqMvSW7nMAtGBa8TLX_7sRg8YCjga5S_oFwiKGZkHNhnuLc2jIU52MC7NiB5eDNmRbKyWuP9ECUMAZwkCB6fURT3ekEbwGFwJYcxtrZpNM7ahP2yJmsLUdPtnxT1HbnOmnTh9qa59E4tNKwm-NqvMNK1QBpU6wYjYaR7R1ZkyNG9xjNBZr0eFLwye87VUNCbnN6g8UBkyJu1KDcgphvMG6ncN8cl_5VJybkCsx98aRf40xDhmKAaCLI4rGCzGJnx72LRxM%3D&u=https%3A%2F%2Fcabforum.org%2F2015%2F10%2F07%2F2015-10-07-face-to-face-meeting-minutes-meeting-36-istanbul%2F%23Certificate-Validity-Periods">https://cabforum.org/2015/10/07/2015-10-07-face-to-face-meeting-minutes-meeting-36-istanbul/#Certificate-Validity-Periods</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://clicktime.symantec.com/a/1/_kRR0OElBjN9aS0ajOZyogMwHHNQaS4ibS757sqb9Xk=?d=O15yK2tZr6IM_dP9P3FpuBMSGvoEh4HOKvSAmyrqaHYpKRrsnEhlYMrvjIsh8q-cEHPRfGc_PrIIi9xB9nbFWngRQmtApZ_z3rHxvXYKLhRqrh5f-jTZbvcxcHNyRUNk1aOMC-9rzlAZP-RrxZomvnc7feubxYIuHn-F3_gmhhcCsrfiFLy_9rLTb2ZJmBPGK-JaolqMvSW7nMAtGBa8TLX_7sRg8YCjga5S_oFwiKGZkHNhnuLc2jIU52MC7NiB5eDNmRbKyWuP9ECUMAZwkCB6fURT3ekEbwGFwJYcxtrZpNM7ahP2yJmsLUdPtnxT1HbnOmnTh9qa59E4tNKwm-NqvMNK1QBpU6wYjYaR7R1ZkyNG9xjNBZr0eFLwye87VUNCbnN6g8UBkyJu1KDcgphvMG6ncN8cl_5VJybkCsx98aRf40xDhmKAaCLI4rGCzGJnx72LRxM%3D&u=https%3A%2F%2Fcabforum.org%2F2015%2F06%2F24%2F2015-06-24-face-to-face-meeting-35-minutes%2F">https://cabforum.org/2015/06/24/2015-06-24-face-to-face-meeting-35-minutes/</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://clicktime.symantec.com/a/1/XLiIOfpcrncbCxW1UkGp2l5eoDsiEaQ-g5Z90IaeQ2c=?d=O15yK2tZr6IM_dP9P3FpuBMSGvoEh4HOKvSAmyrqaHYpKRrsnEhlYMrvjIsh8q-cEHPRfGc_PrIIi9xB9nbFWngRQmtApZ_z3rHxvXYKLhRqrh5f-jTZbvcxcHNyRUNk1aOMC-9rzlAZP-RrxZomvnc7feubxYIuHn-F3_gmhhcCsrfiFLy_9rLTb2ZJmBPGK-JaolqMvSW7nMAtGBa8TLX_7sRg8YCjga5S_oFwiKGZkHNhnuLc2jIU52MC7NiB5eDNmRbKyWuP9ECUMAZwkCB6fURT3ekEbwGFwJYcxtrZpNM7ahP2yJmsLUdPtnxT1HbnOmnTh9qa59E4tNKwm-NqvMNK1QBpU6wYjYaR7R1ZkyNG9xjNBZr0eFLwye87VUNCbnN6g8UBkyJu1KDcgphvMG6ncN8cl_5VJybkCsx98aRf40xDhmKAaCLI4rGCzGJnx72LRxM%3D&u=https%3A%2F%2Fcabforum.org%2F2013%2F11%2F21%2F2013-11-21-minutes%2F">https://cabforum.org/2013/11/21/2013-11-21-minutes/</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://clicktime.symantec.com/a/1/ASON9TOoF3YjcdRltHlusEklsqvztoZnFS3ZWNyeVYE=?d=O15yK2tZr6IM_dP9P3FpuBMSGvoEh4HOKvSAmyrqaHYpKRrsnEhlYMrvjIsh8q-cEHPRfGc_PrIIi9xB9nbFWngRQmtApZ_z3rHxvXYKLhRqrh5f-jTZbvcxcHNyRUNk1aOMC-9rzlAZP-RrxZomvnc7feubxYIuHn-F3_gmhhcCsrfiFLy_9rLTb2ZJmBPGK-JaolqMvSW7nMAtGBa8TLX_7sRg8YCjga5S_oFwiKGZkHNhnuLc2jIU52MC7NiB5eDNmRbKyWuP9ECUMAZwkCB6fURT3ekEbwGFwJYcxtrZpNM7ahP2yJmsLUdPtnxT1HbnOmnTh9qa59E4tNKwm-NqvMNK1QBpU6wYjYaR7R1ZkyNG9xjNBZr0eFLwye87VUNCbnN6g8UBkyJu1KDcgphvMG6ncN8cl_5VJybkCsx98aRf40xDhmKAaCLI4rGCzGJnx72LRxM%3D&u=https%3A%2F%2Fcabforum.org%2Fpipermail%2Fpublic%2F2013-November%2F002479.html">https://cabforum.org/pipermail/public/2013-November/002479.html</a><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Basically, the Forum's been talking about it for quite some time. The reactions and responses to Ballot 111 are fairly telling, in that we see many of the same responses from the same members, three years later, and nothing has changed.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I realize the proposition of the Ballot itself may be seen as "out of the blue", but the fact how many incidents in 2017 alone where we've discovered new misissuance, or we've discovered audit irregularities, provide ample evidence that
the current ecosystem and incentives are not aligned with security. This is but one step in a positive direction.<o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>