<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
HARICA votes "yes" to ballot 198.<br>
<br>
Dimitris.<br>
<br>
<div class="moz-cite-prefix">On 24/4/2017 8:29 μμ, Jeremy Rowley via
Public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:b72affb911ca4c72a4bdf9a792394f39@EX2.corp.digicert.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1485123272;
mso-list-type:hybrid;
mso-list-template-ids:-1810615808 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:2081098907;
mso-list-template-ids:-1572798782;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Apparently May comes after April, not
March.<o:p></o:p></p>
<p class="line874" style="background:white"><span
style="font-size:11.0pt;color:black">Ballot 198 – .Onion
Revisions<o:p></o:p></span></p>
<p class="line874" style="background:white"><span
style="font-size:11.0pt;color:black">Appendix F of the EV
Guidelines in unclear on what a CA does with the Tor Service
Descriptor Hash extension. This ballot clarifies that
inclusion of the extension in the TBSCertificate is
required. <o:p></o:p></span></p>
<p class="line862"
style="background:white;font-variant-ligatures:
normal;font-variant-caps: normal;orphans:
2;text-align:start;widows: 2;-webkit-text-stroke-width:
0px;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px"><span
style="font-size:11.0pt;color:black">The following motion
has been proposed by Jeremy Rowley of DigiCert and endorsed
by Ryan Sleevi of Google and Erwann Abalea of DocuSign
France to introduce new Final Maintenance Guidelines for the
"Guidelines for the Issuance and Management of Extended
Validation Certificates" (EV Guidelines).<o:p></o:p></span></p>
<p class="line874" style="background:white"><span
style="font-size:11.0pt;color:black">-- MOTION BEGINS –<o:p></o:p></span></p>
<p class="line874" style="background:white"><span
style="font-size:11.0pt;color:black">Revise Appendix F,
Section 1 to read as follows:<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Times New
Roman",serif">Appendix F – Issuance of Certificates
for .onion Domain Names<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-family:"Times New
Roman",serif">A CA may issue an EV Certificate
containing the .onion Domain Name provided that issuance
complies with the requirements set forth in this Appendix:<o:p></o:p></span></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormalCxSpMiddle"
style="margin-left:0in;mso-add-space:auto;mso-list:l0 level1
lfo3"><span style="font-family:"Times New
Roman",serif">CAB Forum Tor Service Descriptor Hash
extension (2.23.140.1.31)<o:p></o:p></span></li>
</ol>
<p class="MsoNormal"><span style="font-family:"Times New
Roman",serif">The CAB Forum extension in of the
TBSCertificate to convey hashes of keys related to .onion
addresses. The CA MUST include the Tor Service Descriptor
Hash extension using the following format:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New
Roman",serif">cabf-TorServiceDescriptorHash OBJECT
IDENTIFIER ::= { 2.23.140.1.31 }<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New
Roman",serif">TorServiceDescriptorHash:: = SEQUENCE { <o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.5in"><span
style="font-family:"Times New Roman",serif">algorithm
AlgorithmIdentifier<o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.5in"><span
style="font-family:"Times New Roman",serif">subjectPublicKeyHash
BIT STRING }<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New
Roman",serif">Where the AlgorithmIdentifier is a
hashing algorithm (defined in RFC 6234) performed over the
raw Public Key of the .onion service and
SubjectPublicKeyHash is the value of the hash output of the
raw Public Key.<o:p></o:p></span></p>
<p class="line874" style="background:white"><span
style="font-size:11.0pt;color:black">--Motion Ends--<o:p></o:p></span></p>
<p class="line874"
style="background:white;font-variant-ligatures:
normal;font-variant-caps: normal;orphans:
2;text-align:start;widows: 2;-webkit-text-stroke-width:
0px;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px"><span
style="font-size:11.0pt;color:black">The procedure for
approval of this Final Maintenance Guideline ballot is as
follows (exact start and end times may be adjusted to comply
with applicable Bylaws and IPR Agreement):<o:p></o:p></span></p>
<table class="MsoNormalTable"
style="margin-left:6.0pt;border-collapse:collapse"
cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="width:229.5pt;border:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt" width="306"
valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">BALLOT 198 Status: Final
Maintenance Guideline<o:p></o:p></span></p>
</td>
<td style="width:82.5pt;border:solid windowtext
1.0pt;border-left:none;padding:0in 5.4pt 0in
5.4pt;border-image: initial" width="110" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">Start time (22:00 UTC)<o:p></o:p></span></p>
</td>
<td style="width:79.5pt;border:solid windowtext
1.0pt;border-left:none;padding:0in 5.4pt 0in
5.4pt;border-image: initial" width="106" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">End time (22:00 UTC)<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="width:229.5pt;border:solid windowtext
1.0pt;border-top:none;padding:0in 5.4pt 0in
5.4pt;border-image: initial" width="306" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">Discussion (7 to 14 days)<o:p></o:p></span></p>
</td>
<td
style="width:82.5pt;border-top:none;border-left:none;border-bottom:solid
windowtext 1.0pt;border-right:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt;border-image: initial"
width="110" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">April 24, 2017<o:p></o:p></span></p>
</td>
<td
style="width:79.5pt;border-top:none;border-left:none;border-bottom:solid
windowtext 1.0pt;border-right:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt;border-image: initial"
width="106" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">May, 2017<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="width:229.5pt;border:solid windowtext
1.0pt;border-top:none;padding:0in 5.4pt 0in
5.4pt;border-image: initial" width="306" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">Vote for approval (7 days)<o:p></o:p></span></p>
</td>
<td
style="width:82.5pt;border-top:none;border-left:none;border-bottom:solid
windowtext 1.0pt;border-right:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt;border-image: initial"
width="110" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">May 1, 2017<o:p></o:p></span></p>
</td>
<td
style="width:79.5pt;border-top:none;border-left:none;border-bottom:solid
windowtext 1.0pt;border-right:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt;border-image: initial"
width="106" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">May 8, 2017<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="width:229.5pt;border:solid windowtext
1.0pt;border-top:none;padding:0in 5.4pt 0in
5.4pt;border-image: initial" width="306" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">If vote approves ballot:
Review Period (Chair to send Review Notice) (30
days). If Exclusion Notice(s) filed, ballot approval
is rescinded and PAG to be created. If no Exclusion
Notices filed, ballot becomes effective at end of
Review Period.<o:p></o:p></span></p>
</td>
<td
style="width:82.5pt;border-top:none;border-left:none;border-bottom:solid
windowtext 1.0pt;border-right:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt;border-image: initial"
width="110" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">Upon filing of Review
Notice by Chair<o:p></o:p></span></p>
</td>
<td
style="width:79.5pt;border-top:none;border-left:none;border-bottom:solid
windowtext 1.0pt;border-right:solid windowtext
1.0pt;padding:0in 5.4pt 0in 5.4pt;border-image: initial"
width="106" valign="top">
<p class="line862"
style="margin:0in;margin-bottom:.0001pt"><span
style="font-size:11.0pt">30 days after filing of
Review Notice by Chair<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="line874"
style="background:white;font-variant-ligatures:
normal;font-variant-caps: normal;orphans:
2;text-align:start;widows: 2;-webkit-text-stroke-width:
0px;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px"><span
style="font-size:11.0pt;color:black">From Bylaw 2.3: If the
Draft Guideline Ballot is proposing a Final Maintenance
Guideline, such ballot will include a redline or comparison
showing the set of changes from the Final Guideline
section(s) intended to become a Final Maintenance Guideline,
and need not include a copy of the full set of guidelines.
Such redline or comparison shall be made against the Final
Guideline section(s) as they exist at the time a ballot is
proposed, and need not take into consideration other ballots
that may be proposed subsequently, except as provided in
Bylaw Section 2.3(j).<o:p></o:p></span></p>
<p class="line862"
style="background:white;font-variant-ligatures:
normal;font-variant-caps: normal;orphans:
2;text-align:start;widows: 2;-webkit-text-stroke-width:
0px;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px"><span
style="font-size:11.0pt;color:black">Votes must be cast by
posting an on-list reply to this thread on the Public list.
A vote in favor of the motion must indicate a clear 'yes' in
the response. A vote against must indicate a clear 'no' in
the response. A vote to abstain must indicate a clear
'abstain' in the response. Unclear responses will not be
counted. The latest vote received from any representative of
a voting member before the close of the voting period will
be counted. Voting members are listed here:<span
class="apple-converted-space"> </span><a
href="https://cabforum.org/members/"
moz-do-not-send="true"><span style="border:none windowtext
1.0pt;padding:0in">https://cabforum.org/members/</span></a><o:p></o:p></span></p>
<p class="line874"
style="background:white;font-variant-ligatures:
normal;font-variant-caps: normal;orphans:
2;text-align:start;widows: 2;-webkit-text-stroke-width:
0px;text-decoration-style: initial;text-decoration-color:
initial;word-spacing:0px"><span
style="font-size:11.0pt;color:black">In order for the motion
to be adopted, two thirds or more of the votes cast by
members in the CA category and greater than 50% of the votes
cast by members in the browser category must be in favor.
Quorum is shown on CA/Browser Forum wiki. Under Bylaw
2.2(g), at least the required quorum number must participate
in the ballot for the ballot to be valid, either by voting
in favor, voting against, or abstaining.<span
class="apple-converted-space"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New
Roman",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Times New
Roman",serif"><o:p> </o:p></span></b></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a></pre>
</blockquote>
<br>
</body>
</html>