<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><a name="_MailEndCompose">I’d support removing the words “Certificate Policy” from the document title, if that is the request, but I am fine with whatever the group decides.<o:p></o:p></a></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><o:p> </o:p></span></p><span style='mso-bookmark:_MailEndCompose'></span><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Public [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Rich Smith via Public<br><b>Sent:</b> Wednesday, June 21, 2017 5:51 PM<br><b>To:</b> 'Ryan Sleevi' <sleevi@google.com>; 'Gervase Markham' <gerv@mozilla.org><br><b>Cc:</b> Rich Smith <richard.smith@comodo.com>; 'CA/Browser Forum Public Discussion List' <public@cabforum.org><br><b>Subject:</b> Re: [cabfpub] Baseline Requirements "Certificate Policy" for the Issuance and Management of Publicly-Trusted Certificates<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Should we put this forth as a ballot? Anyone who might have reason that we should go the other way can bring it up in the discussion period.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>From:</b> Ryan Sleevi [<a href="mailto:sleevi@google.com">mailto:sleevi@google.com</a>] <br><b>Sent:</b> Wednesday, June 21, 2017 9:30 AM<br><b>To:</b> Gervase Markham <<a href="mailto:gerv@mozilla.org">gerv@mozilla.org</a>><br><b>Cc:</b> Rich Smith <<a href="mailto:richard.smith@comodo.com">richard.smith@comodo.com</a>>; CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org">public@cabforum.org</a>><br><b>Subject:</b> Re: [cabfpub] Baseline Requirements "Certificate Policy" for the Issuance and Management of Publicly-Trusted Certificates<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>As it stands, <a href="http://www.webtrust.org/principles-and-criteria/docs/item83987.pdf">http://www.webtrust.org/principles-and-criteria/docs/item83987.pdf</a> and <a href="http://www.etsi.org/deliver/etsi_en/319400_319499/31941102/02.01.01_60/en_31941102v020101p.pdf">http://www.etsi.org/deliver/etsi_en/319400_319499/31941102/02.01.01_60/en_31941102v020101p.pdf</a> both note<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>"Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates"<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>That is, the pre-1.3.0 language, even though they're based on and incorporate post-1.3.0 versions.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><a href="https://cabforum.org/2015/04/16/ballot-146-convert-baseline-requirements-to-rfc-3647-framework/">https://cabforum.org/2015/04/16/ballot-146-convert-baseline-requirements-to-rfc-3647-framework/</a> as text notes "Be it resolved that the CA / Browser Forum adopts the attached CA/B Forum Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates, v.1.3.0, effective upon adoption."<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>On the basis of this data, and in the lack of evidence to the contrary, it certainly would appear that changing the title of the document to reflect its historic, pre-1.3.0 naming, has _less_ impact both to the BRs and consumers than it does to suggest changing Section 2.2.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Of course, if others are aware of evidence to the contrary, this would be useful to provide. But this is why I was highlighting that whether or not external documents were updated to refer to the 'new' language (in which case, changing 2.2 is the path of least resistance) or 'old' language (as, it turns out, they are), can affect the cost evaluation of the different proposals.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Hopefully that's at least an objective reason to "change the title back to what it was" :)<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Wed, Jun 21, 2017 at 9:39 AM, Gervase Markham <<a href="mailto:gerv@mozilla.org" target="_blank">gerv@mozilla.org</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'>On 21/06/17 15:36, Rich Smith wrote:<br>> If I’m not mistaken, Gerv is saying, rather than update a bunch of text<br>> in other places, how about changing the name back to /Baseline<br>> Requirements for the Issuance and Management of Publicly-Trusted<br>> Certificates/.<br>><br>> Gerv, if that is correct, I second the motion.<br><br>That was my suggestion. 2 caveats, though: Ryan pointed out offlist that<br>the name may be referenced elsewhere, and so it might be more work to<br>change to something new than to standardize on what the cover page<br>currently says. And also, presumably we added the words "Certificate<br>Policy" to the name for a reason; we shouldn't remove them without<br>knowing what that reason was.<br><br><a href="https://en.wikipedia.org/wiki/Wikipedia:Chesterton%27s_fence" target="_blank">https://en.wikipedia.org/wiki/Wikipedia:Chesterton%27s_fence</a><br><br>Gerv<o:p></o:p></p></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>