<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 31/3/2017 12:21 πμ, Ryan Sleevi
wrote:<br>
</div>
<blockquote
cite="mid:CACvaWvZh4eJoLa8FA3HjUT2Nh8E1od4MOrivfs7Ru-G3MD_cLw@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Mar 30, 2017 at 4:10 PM,
Dimitris Zacharopoulos <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:jimmy@it.auth.gr"
target="_blank">jimmy@it.auth.gr</a>></span> wrote:
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> The reason for this
language was to have a clear scope on which Root CA
Certificates are affected by this rule.<br>
</div>
</blockquote>
<div><br>
</div>
<div>Isn't this already materially addressed by the scope of
the Baseline Requirements?</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">Anyone who might
object to this change?</div>
</blockquote>
<div><br>
</div>
<div>I'm still not sure I fully understand the proposal for
the change and what it is attempting to accomplish, given
the above general scope of the Baseline Requirements, and
Root Programs expectations regarding id-kp-emailProtection
or id-kp-codeSigning (namely, they don't require "WebTrust
for CAs - SSL Baseline with Network Security" audits) </div>
</div>
</div>
</div>
</blockquote>
<br>
You are probably right, it has been discussed several times in the
past. I had the impression that the new ETSI EN 319 411-1 have
direct references to the BRs even for non-SSL cases (I will need to
double check on that). So, this means that nobody will probably
object to the proposed change. <br>
<br>
If Digicert or Entrust who endorsed this ballot, have an objection
about this change, please let me know otherwise I will circulate
this correction before the voting period begins.<br>
<br>
<br>
Thanks,<br>
Dimitris.<br>
</body>
</html>