<div dir="ltr">This also looks good to me.</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Sep 25, 2017 at 6:32 AM, Tim Hollebeek via Public <span dir="ltr"><<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div class="m_-4440361780386350027WordSection1">
<p class="MsoNormal">This looks good to me and we would support it.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><span class=""><b>From:</b> Public [mailto:<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@<wbr>cabforum.org</a>] <b>
On Behalf Of </b>philliph--- via Public<br>
</span><b>Sent:</b> Saturday, September 23, 2017 3:05 PM<br>
<b>To:</b> Kirk Hall <<a href="mailto:Kirk.Hall@entrustdatacard.com" target="_blank">Kirk.Hall@entrustdatacard.com</a><wbr>>; CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>><br>
<b>Subject:</b> Re: [cabfpub] Fix to CAA ballot<u></u><u></u></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am inviting comment.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Sep 23, 2017, at 1:16 PM, Kirk Hall via Public <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="color:#1f497d">Phill – to make it clear, is this a pre-ballot, and are you inviting comment / edits?</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1f497d"> </span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1f497d">Whether 214 passes or fails, it would be good to have a backup ready to go.</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1f497d"> </span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><u></u><u></u></span></p>
</div>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal"><b>From:</b><span class="m_-4440361780386350027apple-converted-space"> </span>Public [<a href="mailto:public-bounces@cabforum.org" target="_blank"><span style="color:#954f72">mailto:public-bounces@<wbr>cabforum.org</span></a>]<span class="m_-4440361780386350027apple-converted-space"> </span><b>On Behalf
Of<span class="m_-4440361780386350027apple-converted-space"> </span></b>philliph--- via Public<br>
<b>Sent:</b><span class="m_-4440361780386350027apple-converted-space"> </span>Saturday, September 23, 2017 7:48 AM<br>
<b>To:</b><span class="m_-4440361780386350027apple-converted-space"> </span>CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org" target="_blank"><span style="color:#954f72">public@cabforum.org</span></a>><br>
<b>Subject:</b><span class="m_-4440361780386350027apple-converted-space"> </span>[EXTERNAL][cabfpub] Fix to CAA ballot<span style="font-size:12.0pt;font-family:"Times New Roman",serif"><u></u><u></u></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">Looking at the current situation, I am thinking that the fixup ballot to the fixup ballot should assume 214 fails and be worded as follows:<u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">In the Baseline Requirements v1.4.9 Section 3.2.2.8. CAA Records<br>
<br>
Strike:<br>
<br>
As part of the issuance process, the CA MUST check for a CAA record for each dNSName in the subjectAltName extension of the certificate to be issued, according to the procedure in RFC 6844, following the processing instructions set down in RFC 6844 for any
records found. If the CA issues, they MUST do so within the TTL of the CAA record, or 8 hours, whichever is greater.<br>
<br>
Replace with:<br>
<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">With effect until XXth YYYY 2018, <u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">As part of the issuance process, the CA MUST check for CAA records and follow the processing instructions for any records found, for each dNSName in the subjectAltName extension
of the certificate to be issued, as specified in either RFC 6844 or RFC 6844 as amended by Errata 5065 (Appendix A). If the CA issues, they MUST do so within the TTL of the CAA record, or 8 hours, whichever is greater.<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">With effect after YYYY 2018:<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">As part of the issuance process, the CA MUST check for CAA records and follow the processing instructions for any records found, for each dNSName in the subjectAltName extension
of the certificate to be issued, as specified in RFC 6844 as amended by Errata 5065 (Appendix A). If the CA issues, they MUST do so within the TTL of the CAA record, or 8 hours, whichever is greater.<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> <u></u><u></u></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif">______________________________<wbr>_________________<br>
Public mailing list<br>
</span><a href="mailto:Public@cabforum.org" target="_blank"><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif;color:#954f72">Public@cabforum.org</span></a><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif"><br>
</span><a href="https://scanmail.trustwave.com/?c=4062&d=_rDG2elFgz3owimU2ZUNP6EZ0eP3TV7FeJJ8u8_auQ&s=5&u=https%3a%2f%2fcabforum%2eorg%2fmailman%2flistinfo%2fpublic" target="_blank"><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif;color:#954f72">https://cabforum.org/mailman/<wbr>listinfo/public</span></a><u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div></div></div>
</div>
<br>______________________________<wbr>_________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org">Public@cabforum.org</a><br>
<a href="https://cabforum.org/mailman/listinfo/public" rel="noreferrer" target="_blank">https://cabforum.org/mailman/<wbr>listinfo/public</a><br>
<br></blockquote></div><br></div>