<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>Hi Ryan, can you give an example of 'cross-jurisdictional directory trees'?</div><div><br></div><div>Thanks,</div><div>M.D.</div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><div style="font-size:85%;color:#575757" dir="auto">Sent from Samsung tablet.</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Ryan Sleevi <sleevi@google.com> </div><div>Date: 3/25/17 01:15 (GMT+01:00) </div><div>To: "Moudrick M. Dadashov" <md@ssc.lt> </div><div>Cc: CA/Browser Forum Public Discussion List <public@cabforum.org>, Ben Wilson <ben.wilson@digicert.com> </div><div>Subject: Re: [cabfpub] Naming rules </div><div><br></div></div><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Mar 24, 2017 at 8:07 PM, Moudrick M. Dadashov <span dir="ltr"><<a href="mailto:md@ssc.lt" target="_blank">md@ssc.lt</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>Auditor examine it through the same government adopted registry.</div><div><br></div><div>In fact if government has a centralised register, there is a very little chance that the same data catogories will be maintained in two different resources - duplication of responsibilitiies is prohibited by law.</div><span class=""><div><br></div><div>Thanks,</div><div>M.D.</div></span></div></blockquote><div><br></div><div><br></div><div>Hi Moudrick,</div><div><br></div><div>I'm sorry, but it may not have been clear, I was talking about cross-jurisdictional directory trees. There's nothing that would ensure their unambiguous uniqueness here, and as proposed, two entities could have X.500 DITs that reflected both _their_ jurisdiction and, more importantly, how _their_ jurisdiction views other jurisdictions.</div><div><br></div><div>I believe you've misunderstood this to be about a single jurisdiction, but I was not talking about that. Auditors would have to be aware of all jurisdictions - and more importantly, all jurisdictional laws that apply or are relevant for CAs. This is much like the can of worms related to 9.16.3 in which some laws or registries only apply to specific participants.</div><div><br></div><div>So while your responses would be correct for a single jurisdiction, that's not the issue :)</div></div></div></div>
</body></html>