<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:TimesNewRomanPSMT;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.gmail-
{mso-style-name:gmail-;}
p.gmail-m-6664240174555130080m-8540200511719743534line867, li.gmail-m-6664240174555130080m-8540200511719743534line867, div.gmail-m-6664240174555130080m-8540200511719743534line867
{mso-style-name:gmail-m_-6664240174555130080m-8540200511719743534line867;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.gmail-m-6664240174555130080m-8540200511719743534line874, li.gmail-m-6664240174555130080m-8540200511719743534line874, div.gmail-m-6664240174555130080m-8540200511719743534line874
{mso-style-name:gmail-m_-6664240174555130080m-8540200511719743534line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle23
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:58484651;
mso-list-template-ids:-1638636036;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><a name="_MailEndCompose">In response to Jeremy’s post, the Governance Reform WG could re-examine sections 2.2 and 2.3 of the Bylaws and make suggested improvements as the WG works on other sections of the Bylaws. The goal would be to write clearer rules on how ballots are to be submitted, interpreted, and incorporated into guidelines.<o:p></o:p></a></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'>In response to Ryan’s comments below, I would like to emphasize the importance of the redlined version—it is by looking at how proposed edits to the official text (in between motion begins and motion ends), </span><span style='mso-bookmark:_MailEndCompose'>will be incorporated into the document that the ballot proposer (and we, who should all be reviewing the redline) can spot any inconsistencies. These inconsistencies happen too often, and we should be looking at ways to minimize their occurrence. (Also, if you have a ballot, there are currently two ways to create a redlined version—Github and Word versions on the wiki.)<o:p></o:p></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><o:p> </o:p></span></p><span style='mso-bookmark:_MailEndCompose'></span><p class=MsoNormal><b>From:</b> Public [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Ryan Sleevi via Public<br><b>Sent:</b> Tuesday, May 16, 2017 2:00 PM<br><b>To:</b> Kirk Hall <Kirk.Hall@entrustdatacard.com><br><b>Cc:</b> Ryan Sleevi <sleevi@google.com>; CA/Browser Forum Public Discussion List <public@cabforum.org><br><b>Subject:</b> Re: [cabfpub] [EXTERNAL]Re: Revised Notice of Review Period - Ballot 198 - .Onion Revisions<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Right, to be clear, I was not suggesting you made a mistake. You did everything by the book :)<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Rather, your Review Notice included the balloted text (motion begins/motion ends), but not the redline. In Jeremy's "ballot-thing" (for I don't know what we want to term it), there was the text you included - and the redline.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This is one of those ambiguities in the Bylaws and IP Policy that I was trying to call out. Is the Ballot (e.g. the thing called Ballot in the Bylaws) <a href="https://cabforum.org/pipermail/public/2017-April/010706.html">https://cabforum.org/pipermail/public/2017-April/010706.html</a> ? If so, then the Ballot is 'both' the text you included, and the redlines. In Jeremy's case, the two were in conflict - the redline presented something different than the motion text. The Bylaws describe a Ballot as including a redline/comparison (which Jeremy did), but it's different than what the motion begins/ends text says.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I can't seem to find any requirements on the form of Review Notice, but it sounds like we're in agreement that, regardless of what the Review Notice states, what it applies to is "the Ballot". If we agree the Ballot is the motion begins/ends text (e.g. what you've published in the Review Notice, and what was voted on), then that's what it applies to. If we agree the Ballot is on the redline text (e.g. what Ben shared), then the Review Notice and the Ballot are different, but the Ballot still supercedes the Review Notice.<o:p></o:p></p></div><div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Tue, May 16, 2017 at 3:43 PM, Kirk Hall <<a href="mailto:Kirk.Hall@entrustdatacard.com" target="_blank">Kirk.Hall@entrustdatacard.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>I have not followed all the details of this discussion, but I will offer my opinion on one point: any errors in the Review Notice do not affect the ballot or results of voting on the ballot.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>For this ballot, if I included the wrong text in the Review Notice, can Jeremy please send me the correct text and I will circulate a corrected Review Notice and start the voting over again.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>I typically look for the original ballot on the list from the proposer that started the process (plus any revisions that occurred during the discussion period), and put that in the Review Notice after a successful vote. I’m not sure if that caused a mistake here.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b>From:</b> Public [mailto:<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Ryan Sleevi via Public<br><b>Sent:</b> Tuesday, May 16, 2017 11:39 AM<br><span class=gmail-><b>To:</b> CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>></span><br><b>Cc:</b> Ryan Sleevi <<a href="mailto:sleevi@google.com" target="_blank">sleevi@google.com</a>><br><b>Subject:</b> [EXTERNAL]Re: [cabfpub] Revised Notice of Review Period - Ballot 198 - .Onion Revisions<o:p></o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>As Ben has highlighted, the result of 198 created a new set of issues.<o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Kirk's original message includes the full text of the ballot (MOTION BEGINS), which, unfortunately, used text different from what was adopted in Ballot 144 (and part of the current EVGs) when Jeremy made his modifications.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>In examining 198 - <a href="https://cabforum.org/pipermail/public/2017-April/010706.html" target="_blank">https://cabforum.org/pipermail/public/2017-April/010706.html</a> - it's clear in Jeremy's redlined versions (which, mistakenly, I reviewed as truth), the 'intent' was a small change. See <a href="https://cabforum.org/pipermail/public/attachments/20170424/80683ba2/attachment-0001.pdf" target="_blank">https://cabforum.org/pipermail/public/attachments/20170424/80683ba2/attachment-0001.pdf</a><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>However, as Balloted, it requires a full replacement of the text adopted in 144, in a way that's structurally incompatible with the ASN.1 encoding.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Worse, this is something that was discussed during the voting reform discussions - both situations where redlines and text differ (as in this case) and questions about redlining as 'source of truth'. We tried to address it as best as possible, but also somewhat punted the issue as unlikely :)<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I think it's worth highlighting this concern broadly, because we have several possible interpretations:<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>1) The MOTION BEGINS/MOTION ENDS is authoritative (e.g. as Kirk has distributed)<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - In this case, we've now introduced a bug into the processing that is not easily undone.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Supporting Argument: This is how we've always done things.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Solution Suggestion: Hold a ballot immediately to try to fix this before the end of the IP review.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Approach 1: Nullify the ballot? That is, to keep the version of the BRs the same.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Approach 2: Direct the Chair not to publish any new versions of the BRs (thus triggering compliance for CAs) until the matter is resolved<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Approach 3: Introduce a new ballot with a new OID for the service descriptor that restores the 144 text<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Implications:<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - If folks don't vote on this, we're stuck in a bad place (effectively, no one should issue EV onion certs, because they'd post a compat/interop risk)<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>2) The redline text is authoritative (e.g. as Ben has distributed)<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - In this case, we're saying that the PDFs, not the ballot text, are what is authoritative.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - This means you can no longer read ballots on our website "as is", but must ALSO view/post the supporting materials<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Supporting Argument: The Bylaws seem to support this with respect to Section 2.3(a).<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Solution Suggestion: Hold a ballot to agree on this interpretation for this specific ballot<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Solution Suggestion p2: Hold a (same/different?) ballot to the bylaws clarify this for future ballots<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Implications:<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - We should figure out what this means for future ballots if we go this route.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - It also means our ballot postings to the website are probably incomplete<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>3) The ballot is invalid (due to the inconsistency)<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - In this case, we're saying the ballot is null because of the mismatch<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Supporting Argument: The Bylaws in 2.3(a) indicate that a Draft Guideline Ballot proposing a Final Maintenance Guideline will include a redline or comparison, and that such redline or comparison be made against the Final Guideline section(s) as they exist at the time the ballot is proposed. Jeremy's redline was not against that section, ergo, was not a valid ballot.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Solution Suggestion: Hold a ballot to agree on this interpretation for this specific ballot<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> - Solution Suggestion p2: Adopt it fixed<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>In short, I think we should probably resolve this with a ballot - which can be completed in two weeks. The IP Review Notice has been triggered, but its unclear as to whether Review Notices need to also include the Ballot text itself (e.g. the Ballot is, presumably, what was posted to <a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a> and voted on - which included the redline changes). That is, it's unclear whether the text Kirk included in the Review Notice - which is different than the ballot (since it omits the redlines) - supersedes/replaces the Ballot itself.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Does this capture every possible interpretation? Are the others?<o:p></o:p></p></div></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>On Tue, May 16, 2017 at 1:00 PM, Ben Wilson via Public <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a name="m_-6664240174555130080_m_-85402005117197">All,</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Attached is the redlined version of Appendix F of the EV Guidelines (v.1.6.3) based on the language of the ballot. There was a discrepancy between the earlier PDF attachment to the ballot and the text in email that announced the ballot. It appears that the PDF was based on an old, out-of-date version of Appendix F . <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>In the attached redlined version I have tried to preserve the intent of Ballot 198. I will be posting version 1.6.3 of the EV Guidelines to the CA/Browser Forum website shortly. All versions (PDF/Word/redlined/w-o redlining) will be uploaded to here <a href="https://cabforum.org/wiki/EV" target="_blank">https://cabforum.org/wiki/EV</a> on the wiki as well.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Yours truly,<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Ben Wilson <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b>From:</b> Public [mailto:<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Kirk Hall via Public<br><b>Sent:</b> Monday, May 8, 2017 5:18 PM<br><b>To:</b> CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>><br><b>Cc:</b> Kirk Hall <<a href="mailto:Kirk.Hall@entrustdatacard.com" target="_blank">Kirk.Hall@entrustdatacard.com</a>><br><b>Subject:</b> [cabfpub] Revised Notice of Review Period - Ballot 198 - .Onion Revisions<o:p></o:p></p></div></div><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'>Sorry, got end date wrong before. End date in June 8 at 01:00 UTC.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span style='font-family:"Arial",sans-serif'>NOTICE OF REVIEW PERIOD – BALLOT 198</span></b><o:p></o:p></p><p class=MsoNormal align=center style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:center'><b><span style='font-family:"Arial",sans-serif'> </span></b><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.2). This Review Period is for Final Maintenance Guidelines (30 day Review Period). </span><span style='font-family:TimesNewRomanPSMT'>A complete draft of the Draft Guideline that is the subject of this Review Notice is attached.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'>Date Review Notice Sent: May 8, 2017</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'>Ballot for Review: Ballot 198 - .Onion Revisions</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'>Start of Review Period: May 9, 2017 at 01:00 UTC</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'>End of Review Period: June <span style='color:#1F497D'>8</span>, 2017 at 01:00 UTC</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:.25in'><span style='font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>Please forward any Exclusion Notice relating to Essential Claims to the Chair by email to </span><a href="mailto:kirk.hall@entrustdatacard.com" target="_blank"><span style='font-family:"Arial",sans-serif'>kirk.hall@entrustdatacard.com</span></a><span style='font-family:"Arial",sans-serif'> before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details. <i>(Optional form of Exclusion Notice is attached)</i></span><o:p></o:p></p><p class=gmail-m-6664240174555130080m-8540200511719743534line867><strong><span style='font-family:"Arial",sans-serif'>Ballot 198 - .Onion Revisions</span></strong><o:p></o:p></p><p class=gmail-m-6664240174555130080m-8540200511719743534line874 style='background:white'><span style='font-family:"Arial",sans-serif'>-- MOTION BEGINS –</span><o:p></o:p></p><p class=gmail-m-6664240174555130080m-8540200511719743534line874 style='background:white'><span style='font-family:"Arial",sans-serif'>Revise Appendix F, Section 1 to read as follows:</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span style='font-family:"Arial",sans-serif'>Appendix F – Issuance of Certificates for .onion Domain Names</span></b><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>A CA may issue an EV Certificate containing the .onion Domain Name provided that issuance complies with the requirements set forth in this Appendix:</span><o:p></o:p></p><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Arial",sans-serif'>CAB Forum Tor Service Descriptor Hash extension (2.23.140.1.31)</span><o:p></o:p></li></ol><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>The CAB Forum extension in of the TBSCertificate to convey hashes of keys related to .onion addresses. The CA MUST include the Tor Service Descriptor Hash extension using the following format:</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>cabf-TorServiceDescriptorHash OBJECT IDENTIFIER ::= { 2.23.140.1.31 }</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>TorServiceDescriptorHash:: = SEQUENCE { </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:.5in'><span style='font-family:"Arial",sans-serif'>algorithm AlgorithmIdentifier</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:.5in'><span style='font-family:"Arial",sans-serif'>subjectPublicKeyHash BIT STRING }</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Arial",sans-serif'>Where the AlgorithmIdentifier is a hashing algorithm (defined in RFC 6234) performed over the raw Public Key of the .onion service and SubjectPublicKeyHash is the value of the hash output of the raw Public Key.</span><o:p></o:p></p><p class=gmail-m-6664240174555130080m-8540200511719743534line874 style='background:white'><span style='font-family:"Arial",sans-serif'>--Motion Ends--</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div></div></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><br>_______________________________________________<br>Public mailing list<br><a href="mailto:Public@cabforum.org" target="_blank">Public@cabforum.org</a><br><a href="https://cabforum.org/mailman/listinfo/public" target="_blank">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></p></blockquote></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div></div></div></div></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></div></body></html>