<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:微软雅黑;
panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"\@微软雅黑";
panose-1:2 11 5 3 2 2 4 2 2 4;}
@font-face
{font-family:华文隶书;
panose-1:2 1 8 0 4 1 1 1 1 1;}
@font-face
{font-family:"\@华文隶书";
panose-1:2 1 8 0 4 1 1 1 1 1;}
@font-face
{font-family:"Lucida Grande";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:宋体;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:宋体;
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML 预设格式 Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:宋体;
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"批注框文本 Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:宋体;
color:black;}
span.HTMLChar
{mso-style-name:"HTML 预设格式 Char";
mso-style-priority:99;
mso-style-link:"HTML 预设格式";
font-family:"Courier New";
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.Char
{mso-style-name:"批注框文本 Char";
mso-style-priority:99;
mso-style-link:批注框文本;
font-family:宋体;
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:4942105;
mso-list-template-ids:1104322252;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=ZH-CN link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'>SHECA agrees that a shorter certificate validity period should be implemented in the future</span>，<span lang=EN-US style='font-family:"Times New Roman","serif"'>and supports a more reasonable validity period for certificate (24/27months) in consideration. SHECA would warmly welcome if there could be further discussions to reach to a consensus that is more appropriate for all parties. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'>We are with the idea proposed by HARICA that a questionnaire should be launched.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'>SHECA votes “no” for ballot 185. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'>Best Regards<o:p></o:p></span></p><div><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US style='font-size:14.0pt;font-family:"Lucida Grande";color:#1F497D'>Ruby Xiong<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#1F497D'>Shanghai Electronic Certification Authority co., ltd.</span><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#595959'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#595959'><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#1F497D'>18F, No.1717, North Sichuan Road, Shanghai, China<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#1F497D'>Tel</span><span style='font-size:10.5pt;font-family:"微软雅黑","sans-serif";color:#1F497D'>：</span><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#1F497D'>+86-21-36393197<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#1F497D'>Email</span><span style='font-size:10.5pt;font-family:"微软雅黑","sans-serif";color:#1F497D'>：</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="mailto:xiongyuanyuan@sheca.com"><span style='font-family:"Lucida Grande"'>xiongyuanyuan@sheca.com</span></a></span><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#1F497D'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"Lucida Grande";color:#595959'><o:p></o:p></span></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr style='height:1.0pt'><td width=311 colspan=2 style='width:233.5pt;border:none;border-top:dashed #BFBFBF 1.0pt;padding:0cm 5.4pt 0cm 5.4pt;height:1.0pt'></td><td width=104 rowspan=2 valign=top style='width:78.35pt;border-top:dashed #BFBFBF 1.0pt;border-left:none;border-bottom:dashed #BFBFBF 1.0pt;border-right:none;padding:0cm 0cm 0cm 0cm;height:1.0pt'></td></tr><tr style='height:1.0pt'><td width=172 style='width:129.3pt;border:none;border-bottom:dashed #BFBFBF 1.0pt;padding:0cm 5.4pt 0cm 5.4pt;height:1.0pt'></td><td width=139 style='width:104.2pt;border:none;border-bottom:dashed #BFBFBF 1.0pt;padding:0cm 5.4pt 0cm 5.4pt;height:1.0pt'></td></tr><tr><td width=172 style='width:129.0pt;padding:0cm 0cm 0cm 0cm'></td><td width=139 style='width:104.25pt;padding:0cm 0cm 0cm 0cm'></td><td width=104 style='width:78.0pt;padding:0cm 0cm 0cm 0cm'></td></tr></table><p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;color:windowtext'>发件人<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:10.0pt;color:windowtext'> Public [mailto:public-bounces@cabforum.org] </span><b><span style='font-size:10.0pt;color:windowtext'>代表 </span></b><span lang=EN-US style='font-size:10.0pt;color:windowtext'>Dimitris Zacharopoulos via Public<br></span><b><span style='font-size:10.0pt;color:windowtext'>发送时间<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:10.0pt;color:windowtext'> Monday, February 20, 2017 7:20 PM<br></span><b><span style='font-size:10.0pt;color:windowtext'>收件人<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:10.0pt;color:windowtext'> CA/Browser Forum Public Discussion List<br></span><b><span style='font-size:10.0pt;color:windowtext'>抄送<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:10.0pt;color:windowtext'> Dimitris Zacharopoulos<br></span><b><span style='font-size:10.0pt;color:windowtext'>主题<span lang=EN-US>:</span></span></b><span lang=EN-US style='font-size:10.0pt;color:windowtext'> Re: [cabfpub] Ballot 185 (Revised) - Limiting the Lifetime of Certificates<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US><br>HARICA participated in the discussion of ballot 185. Our concerns can be summarized in the following:<o:p></o:p></span></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>This proposal will raise the administrative overhead of Subscribers significantly (from where it is today). System administrators time is considered "expensive" thus, this proposal raises the cost for Subscribers. We support automation tools for web sites but there are more things to consider:<o:p></o:p></span></li></ul><ul type=disc><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level2 lfo1'><span lang=EN-US>SSL/TLS certificates are used for more than web services (FTPs, LDAPs, IMAPs, POP3s, Radius, SMTP, etc). Subscribers operating such services don't currently have the necessary tools to automate the renewal process every year and it is not anticipated that such tools will exist anytime soon (even in the year to come).<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level2 lfo1'><span lang=EN-US>Some SSL/TLS certificates are used in Federated Services which require out-of-bad distribution (a very manual process).<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level2 lfo1'><span lang=EN-US>There are many legacy devices that don't support automation in certificate management (Wireless Access Points, VPN servers, etc).<o:p></o:p></span></li></ul></ul><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>The CA/B Forum supports and requires ONLY <u>secure</u> (to the best of the community's knowledge) cryptographic algorithms in the Baseline Requirements. These algorithms have a lifetime expectancy for sustaining attacks and factoring, of several years. In cases where an algorithm was proven or was even considered as insecure, appropriate deprecation measures were adopted, consistent with the vulnerabilities and threats. Of course there are lessons to be learned, and this process must be improved, even standardized. Requiring certificates to be issued every year does not substitute the necessity for appropriate deprecation measures.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>We consider <a href="https://support.google.com/a/answer/7300887">Google's S/MIME policy</a> for certificate validity of 27 months, as the best next-step forward that should be adopted by the CA/B Forum for the Baseline Requirements. It will still raise the administrative overhead for Subscribers but it will be less aggressive and easier to adopt.<o:p></o:p></span></li></ul><p class=MsoNormal><span lang=EN-US>For the reasons above, HARICA votes "no" for ballot 185.<br><br>We would support creating an agreed-upon questionnaire by the Forum members (the same questionnaire for everyone) that will address most or all of the concerns raised in the discussion period of ballot 185. This questionnaire would be forwarded to CA Subscribers thus acquiring consistent, concrete data that will help the Forum decide future steps regarding the certificate validity period and domain validation (or re-validation). We may come back to this in a different thread, after the end of the voting period.<br><br><br>Best regards,<br>Dimitris Zacharopoulos.<o:p></o:p></span></p><p><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><br><br><br>On 13/2/2017 9:18 μμ, Ryan Sleevi via Public wrote:<o:p></o:p></span></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><div><p class=MsoNormal><span lang=EN-US>Pursuant to the consensus on <a href="https://cabforum.org/pipermail/public/2017-February/009530.html">https://cabforum.org/pipermail/public/2017-February/009530.html</a> about the nature of changes during the discussion period, and the request from Gervase on <a href="https://cabforum.org/pipermail/public/2017-February/009618.html">https://cabforum.org/pipermail/public/2017-February/009618.html</a> to adjust what represents the Baseline agreement, this adjusts the effective date from 1 April to 24 August. While individual programs may choose to enact or enforce requirements prior to that, as the Baseline Requirements capture the effective point of common agreement of the bare minimum security levels, it seems appropriate that this Ballot accurately reflect that.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Ballot 185 - Limiting the Lifetime of Certificates<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>The following motion has been proposed by Ryan Sleevi of Google, Inc and endorsed by Josh Aas of ISRG and Gervase Markham of Mozilla to introduce new Final Maintenance Guidelines for the "Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates" and the "Guidelines for the Issuance and Management of Extended Validation Certificates"<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- MOTION BEGINS --<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Modify Section 6.3.2 of the "Baseline Requirements Certificate Policy for the Issuance and Management of Publicly-Trusted Certificates" as follows:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Replace Section 6.3.2, which reads as follows:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>6.3.2. Certificate Operational Periods and Key Pair Usage Periods<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Subscriber Certificates issued after the Effective Date MUST have a Validity Period no greater than 60 months. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Except as provided for below, Subscriber Certificates issued after 1 April 2015 MUST have a Validity Period <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>no greater than 39 months. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Until 30 June 2016, CAs MAY continue to issue Subscriber Certificates with a Validity Period greater than 39 <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>months but not greater than 60 months provided that the CA documents that the Certificate is for a system or <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>software that: <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>(a) was in use prior to the Effective Date; <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>(b) is currently in use by either the Applicant or a substantial number of Relying Parties; <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>(c) fails to operate if the Validity Period is shorter than 60 months; <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>(d) does not contain known security risks to Relying Parties; and <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>(e) is difficult to patch or replace without substantial economic outlay<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>with the following text:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>6.3.2. Certificate Operational Periods and Key Pair Usage Periods<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Subscriber Certificates issued on or after 24 August 2017 MUST NOT have a Validity Period greater than three hundred and ninety-eight (398) days.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Subscriber Certificates issued prior to 24 August 2017 MUST NOT have a Validity Period greater than thirty-nine (39) months.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Modify Section 9.4 of the "Guidelines for the Issuance and Management of Extended Validation Certificates" as follows:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Replace Section 9.4, which reads as follows:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>9.4. Maximum Validity Period For EV Certificate<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>The validity period for an EV Certificate SHALL NOT exceed twenty seven months. It is RECOMMENDED that EV<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Subscriber Certificates have a maximum validity period of twelve months.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>with the following text:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>""""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>9.4 Maximum Validity Period for EV Certificate<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>EV Certificates issued on or after 24 August 2017 MUST NOT have a Validity Period greater than three hundred and ninety-eight (398) days.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>EV Certificates issued prior to 24 August 2017 MUST NOT have a Validity Period greater than twenty seven (27) months.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"""<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- MOTION ENDS --<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Ballot 185 - Limiting the Lifetime of Certificates<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Status: Final Maintenance Guideline<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Review Period:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Start Time: 2017-02-10 00:00:00 UTC<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>End Time: 2017-02-17 00:00:00 UTC<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Vote for Approval:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Start Time: 2017-02-17 00:00:00 UTC<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>End Time: 2017-02-24 00:00:00 UTC<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Votes must be cast by posting an on-list reply to this thread on the Public Mail List.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>A vote in favor of the ballot must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting Member before the close of the voting period will be counted. Voting Members are listed here: <a href="https://cabforum.org/members/">https://cabforum.org/members/</a><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>In order for the ballot to be adopted, two thirds or more of the votes cast by Members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor.<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><br><br><br><o:p></o:p></span></p><pre><span lang=EN-US>_______________________________________________<o:p></o:p></span></pre><pre><span lang=EN-US>Public mailing list<o:p></o:p></span></pre><pre><span lang=EN-US><a href="mailto:Public@cabforum.org">Public@cabforum.org</a><o:p></o:p></span></pre><pre><span lang=EN-US><a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></span></pre></blockquote><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></body></html>