<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Cambria-BoldItalic;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Cambria-Bold;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1153906294;
mso-list-type:hybrid;
mso-list-template-ids:-1639168632 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:1886868037;
mso-list-template-ids:-1321705396;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Jeremy – to put the BR 3.2.2.4 amendment in context, it goes just before 3.2.2.4.1, and there is already another $B!H(BNote:$B!I(B there. So it would look like below. Also, I modified my prior language to make it clearer
by adding $B!H(Bmade by Ballot 190$B!I(B to the first sentence.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><i><span style="font-family:"Cambria",serif">3.2.2.4. Validation of Domain Authorization or Control<o:p></o:p></span></i></b></p>
<p class="MsoNormal" style="text-autospace:none"><b><i><span style="font-family:"Cambria",serif"><o:p> </o:p></span></i></b></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Cambria",serif">This section defines the permitted processes and procedures for validating the Applicant's ownership or control of the domain.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Cambria",serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Cambria",serif">The CA SHALL confirm that, as of the date the Certificate issues, either the CA or a Delegated Third Party has validated each Fully$B!>(BQualified Domain Name (FQDN) listed
in the Certificate using at least one of the methods listed below.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Cambria",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif">Completed confirmations of Applicant authority may be valid for the issuance of multiple certificates over time. In all cases, the confirmation must have been initiated within the time period specified
in the relevant requirement (such as Section 3.3.1 of this document) prior to certificate issuance. For purposes of domain validation, the term Applicant includes the Applicant's Parent Company, Subsidiary Company, or Affiliate.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif">Note: FQDNs may be listed in Subscriber Certificates using dNSNames in the subjectAltName extension or in Subordinate CA Certificates via dNSNames in permittedSubtrees within the Name Constraints
extension.</span><span style="font-family:"Cambria",serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif">[NEW] <b><u><span style="color:black">Note:
</span>The changes to BR 3.2.2.4.1 through 3.2.2.4.10 made by Ballot 190 will apply only to the validation of domain names occurring on or after
<i>[insert Ballot 190$B!G(Bs effective date if it passes and completes its Review Period]</i>. Validation of domain names that occurs before
<i>[insert Ballot 190$B!G(Bs effective date if it passes and completes its Review Period]</i> and the resulting validation data may continue to be used for the periods specified in BR 4.2.1 and EVGL 11.14.3 so long as the validations were conducted in compliance
with the BR Section 3.2.2.4 validation methods in effect at the time of each validation</u></b>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;font-family:"Cambria-Bold",serif">3.2.2.4.1 Validating the Applicant as a Domain Contact.<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Cambria",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Cambria",serif">Confirming the Applicant's control ***</span><span style="font-family:"Cambria",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Public [mailto:public-bounces@cabforum.org] <b>
On Behalf Of </b>Jeremy Rowley via Public<br>
<b>Sent:</b> Thursday, April 27, 2017 1:01 PM<br>
<b>To:</b> CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Cc:</b> Jeremy Rowley <jeremy.rowley@digicert.com><br>
<b>Subject:</b> [EXTERNAL][cabfpub] Ballot 190<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ben let me know that there were questions about Ballot 190. The ballot was withdrawn and hasn$B!G(Bt gone to vote yet because of Section 2:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">$B!H(BThis provisions of Ballot Section 1 will apply only to the validation of domain names occurring after this Ballot 190$B!G(Bs effective date. Validation of domain names that occurs before this
Ballot$B!G(Bs effective date and the resulting validation data may continue to be used for the periods specified in BR 4.2.1 and EVGL 11.14.3 so long as the validations were conducted in compliance with the BR Section 3.2.2.4 validation methods in effect at the
time of each validation.$B!I(B<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I couldn$B!G(Bt tell if the objection to this section was the section not being part of the Baseline Requirements or a general concern that CAs may have issued certificates using the $B!H(Bany other method$B!I(B that will remain valid for potentially
four years (for a re-issue that relies on a previous validation). <o:p></o:p></p>
<p class="MsoNormal">
<o:p></o:p></p>
<p class="MsoNormal">Assuming the first issue is the primary concern, the following language was proposed in the validation working group for inclusion in the BRs:<o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">$B!H(BNote: </span>The changes to BR 3.2.2.4.1 through 3.2.2.4.10 will apply only to the validation of domain names occurring on or after [insert Ballot 190$B!G(Bs effective date if it passes and completes its Review Period].
Validation of domain names that occurs before [insert Ballot 190$B!G(Bs effective date if it passes and completes its Review Period] and the resulting validation data may continue to be used for the periods specified in BR 4.2.1 and EVGL 11.14.3 so long as the
validations were conducted in compliance with the BR Section 3.2.2.4 validation methods in effect at the time of each validation.$B!I(B<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Rather than go through multiple iterations and have this ballot potentially fail, can we do a quick straw poll?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="mso-list:l0 level1 lfo3">Does the proposed language resolve the previous concern with Ballot 190?<o:p></o:p></li><li class="MsoNormal" style="mso-list:l0 level1 lfo3">If not, should section 2 be dropped entirely.
<o:p></o:p></li><li class="MsoNormal" style="mso-list:l0 level1 lfo3">If section 2 remains, would you vote against the ballot?<o:p></o:p></li><li class="MsoNormal" style="mso-list:l0 level1 lfo3">If section 2 was dropped, would you vote for the ballot?
<o:p></o:p></li><li class="MsoNormal" style="mso-list:l0 level1 lfo3">Is there other language you$B!G(Bd prefer to see included instead?
<o:p></o:p></li></ol>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jeremy<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>