<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Ballontekst Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.E-mailStijl17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BallontekstChar
{mso-style-name:"Ballontekst Char";
mso-style-priority:99;
mso-style-link:Ballontekst;
font-family:"Tahoma","sans-serif";}
span.E-mailStijl20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="NL" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Logius PKIoverheid votes Abstain.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">Jochem van den Berge<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">Logius PKIoverheid<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">........................................................................<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:8.0pt;font-family:"Verdana","sans-serif";color:#1F497D">Logius<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">Ministry of the Interior and Kingdom Relations (BZK)<o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">Wilhelmina van Pruisenweg 52 | 2595 AN | The Hague<br>
PO Box 96810 | 2509 JE | The Hague<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">........................................................................<o:p></o:p></span></p>
<p class="MsoNormal"><u><span style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D"><a href="mailto:Jochem.vanden.berge@logius.nl">jochem.vanden.berge@logius.nl</a></span></u><span style="font-size:8.0pt;font-family:"Verdana","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D"><a href="http://www.logius.nl">http://www.logius.nl</a></span><span lang="EN-US" style="font-size:8.0pt;font-family:"Verdana","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">........................................................................<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">Service e-Government<o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:7.5pt;font-family:"Verdana","sans-serif";color:#1F497D">........................................................................</span><span lang="EN-GB" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-GB" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Van:</span></b><span lang="EN-GB" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Public [</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><a href="mailto:public-bounces@cabforum.org"><span lang="EN-GB">mailto:public-bounces@cabforum.org</span></a></span><span lang="EN-GB" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">]
<b>Namens </b>Ryan Sleevi via Public<br>
<b>Verzonden:</b> maandag 13 februari 2017 20:18<br>
<b>Aan:</b> CABFPub<br>
<b>CC:</b> Ryan Sleevi<br>
<b>Onderwerp:</b> [cabfpub] Ballot 185 (Revised) - Limiting the Lifetime of Certificates<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal">Pursuant to the consensus on <a href="https://cabforum.org/pipermail/public/2017-February/009530.html">https://cabforum.org/pipermail/public/2017-February/009530.html</a> about the nature of changes during the discussion period, and the
request from Gervase on <a href="https://cabforum.org/pipermail/public/2017-February/009618.html">https://cabforum.org/pipermail/public/2017-February/009618.html</a> to adjust what represents the Baseline agreement, this adjusts the effective date from 1 April
to 24 August. While individual programs may choose to enact or enforce requirements prior to that, as the Baseline Requirements capture the effective point of common agreement of the bare minimum security levels, it seems appropriate that this Ballot accurately
reflect that.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Ballot 185 - Limiting the Lifetime of Certificates<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The following motion has been proposed by Ryan Sleevi of Google, Inc and endorsed by Josh Aas of ISRG and Gervase Markham of Mozilla to introduce new Final Maintenance Guidelines for the "Baseline Requirements Certificate Policy for the
Issuance and Management of Publicly-Trusted Certificates" and the "Guidelines for the Issuance and Management of Extended Validation Certificates"<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">-- MOTION BEGINS --<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Modify Section 6.3.2 of the "Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates" as follows:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Replace Section 6.3.2, which reads as follows:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">6.3.2. Certificate Operational Periods and Key Pair Usage Periods<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Subscriber Certificates issued after the Effective Date MUST have a Validity Period no greater than 60 months. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Except as provided for below, Subscriber Certificates issued after 1 April 2015 MUST have a Validity Period <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">no greater than 39 months. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Until 30 June 2016, CAs MAY continue to issue Subscriber Certificates with a Validity Period greater than 39 <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">months but not greater than 60 months provided that the CA documents that the Certificate is for a system or <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">software that: <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">(a) was in use prior to the Effective Date; <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">(b) is currently in use by either the Applicant or a substantial number of Relying Parties; <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">(c) fails to operate if the Validity Period is shorter than 60 months; <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">(d) does not contain known security risks to Relying Parties; and <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">(e) is difficult to patch or replace without substantial economic outlay<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">with the following text:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">6.3.2. Certificate Operational Periods and Key Pair Usage Periods<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Subscriber Certificates issued on or after 24 August 2017 MUST NOT have a Validity Period greater than three hundred and ninety-eight (398) days.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Subscriber Certificates issued prior to 24 August 2017 MUST NOT have a Validity Period greater than thirty-nine (39) months.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Modify Section 9.4 of the "Guidelines for the Issuance and Management of Extended Validation Certificates" as follows:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Replace Section 9.4, which reads as follows:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">9.4. Maximum Validity Period For EV Certificate<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The validity period for an EV Certificate SHALL NOT exceed twenty seven months. It is RECOMMENDED that EV<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Subscriber Certificates have a maximum validity period of twelve months.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">with the following text:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">""""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">9.4 Maximum Validity Period for EV Certificate<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">EV Certificates issued on or after 24 August 2017 MUST NOT have a Validity Period greater than three hundred and ninety-eight (398) days.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">EV Certificates issued prior to 24 August 2017 MUST NOT have a Validity Period greater than twenty seven (27) months.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"""<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">-- MOTION ENDS --<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Ballot 185 - Limiting the Lifetime of Certificates<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Status: Final Maintenance Guideline<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Review Period:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Start Time: 2017-02-10 00:00:00 UTC<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">End Time: 2017-02-17 00:00:00 UTC<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Vote for Approval:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Start Time: 2017-02-17 00:00:00 UTC<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">End Time: 2017-02-24 00:00:00 UTC<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Votes must be cast by posting an on-list reply to this thread on the Public Mail List.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">A vote in favor of the ballot must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted.
The latest vote received from any representative of a voting Member before the close of the voting period will be counted. Voting Members are listed here:
<a href="https://cabforum.org/members/">https://cabforum.org/members/</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In order for the ballot to be adopted, two thirds or more of the votes cast by Members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor.<o:p></o:p></p>
</div>
</div>
</div>
<br>
<HR>
<font color=gray size=1 face=Arial>Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.<br>This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. </HR><br></font></body>
</html>