<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><font face="Calibri">Actalis "abstain".</font><br>
</p>
<br>
<div class="moz-cite-prefix">Il 20/10/2017 17:28, Kirk Hall via
Public ha scritto:<br>
</div>
<blockquote type="cite"
cite="mid:76470372695d409981f63fddf91eb59e@PMSPEX04.corporate.datacard.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.line867, li.line867, div.line867
{mso-style-name:line867;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:574323217;
mso-list-template-ids:1254109996;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:2002268552;
mso-list-template-ids:-1117598782;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Voting ends
Thursday, Oct. 26 at 22:00 UTC<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Public
[<a class="moz-txt-link-freetext" href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>
On Behalf Of </b>Ben Wilson via Public<br>
<b>Sent:</b> Thursday, October 12, 2017 11:05 AM<br>
<b>To:</b> CABFPub <a class="moz-txt-link-rfc2396E" href="mailto:public@cabforum.org"><public@cabforum.org></a><br>
<b>Subject:</b> [EXTERNAL][cabfpub] Ballot 208 -
dnQualifiers<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="line867"><strong><span
style="font-family:"Calibri",sans-serif">Ballot
208 - dnQualifiers</span></strong>
<o:p></o:p></p>
<p class="line874">This ballot allows CAs to use dnQualifiers in
certificates to partition groups of certificates into
different sets and to allow non-identity information to be
included in DV certificates.
<o:p></o:p></p>
<p class="line862">The following motion has been proposed by
Peter Bowen of Amazon and endorsed by Ben Wilson of DigiCert
and Ryan Sleevi of Google.
<o:p></o:p></p>
<p class="line874">-- MOTION BEGINS -- <o:p></o:p></p>
<p class="line874">In the Baseline Requirements, REPLACE the
definition of "Subject Identity Information" with:
<o:p></o:p></p>
<p class="line874">"Information that identifies the Certificate
Subject. Subject Identity Information does not include
[strikeout]<s>a domain name listed in the subjectAltName
extension or the Subject commonName field</s>[/strikeout]
[insert]<u>dnQualifier attributes in Distinguished Names,
commonName attributes in Distinguished Names, dNSName
Subject Alternative Names, iPAddress Subject Alternative
Names, or SRVName Subject Alternative Names</u>[/insert]."
<o:p></o:p></p>
<p class="line874">In Section 7.1.4.2.2 Subject Distinguished
Name Fields, re-letter "j" (Other Subject Attributes) as
letter "k" and INSERT a new subsection j. that reads:
<o:p></o:p></p>
<p class="line874">j. Certificate Field: subject:dnQualifier <o:p></o:p></p>
<ul type="disc">
<li class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1
level1 lfo3">
Optional. Contents: This field is intended to be used when
several certificates with the same subject can be
partitioned into sets of related certificates. Each related
certificate set MAY have the same dnQualifier. The CA may
include a dnQualifier attribute with a zero length value to
explicitly indicate that the CA makes no assertion about
relationship with other certificates with the same subject.
The CA MAY set the dnQualifer value to the base64 encoding
of the SHA1 hash of the subjectAlternativeName extnValue if
it wishes to indicate grouping of certificates by
alternative name set. <o:p>
</o:p></li>
</ul>
<p class="line874">-- MOTION ENDS -- <o:p></o:p></p>
<p class="line874">The procedure for approval of this Final
Maintenance Guideline ballot is as follows (exact start and
end times may be adjusted to comply with applicable Bylaws and
IPR Agreement):
<o:p></o:p></p>
<p class="line874">BALLOT 208 Status: Final Maintenance
Guideline Start time (22:00 UTC) End time (22:00 UTC)
<o:p></o:p></p>
<p class="line874">Discussion begins October 12, 2017 22:00 UTC
and ends October 19, 2017 22:00 UTC (7 days)
<o:p></o:p></p>
<p class="line874">Vote for approval begins October 19, 2017
22:00 UTC and ends October 26, 2017 22:00 UTC (7 days)
<o:p></o:p></p>
<p class="line874">If vote approves ballot: Review Period (Chair
to send Review Notice) (30 days). If Exclusion Notice(s)
filed, ballot approval is rescinded and PAG to be created. If
no Exclusion Notices filed, ballot becomes effective at end of
Review Period. Upon filing of Review Notice by Chair 30 days
after filing of Review Notice by Chair
<o:p></o:p></p>
<p class="line874">From Bylaw 2.3: If the Draft Guideline Ballot
is proposing a Final Maintenance Guideline, such ballot will
include a redline or comparison showing the set of changes
from the Final Guideline section(s) intended to become a Final
Maintenance Guideline, and need not include a copy of the full
set of guidelines. Such redline or comparison shall be made
against the Final Guideline section(s) as they exist at the
time a ballot is proposed, and need not take into
consideration other ballots that may be proposed subsequently,
except as provided in Bylaw Section 2.3(j). <o:p></o:p></p>
<p class="line862">Votes must be cast by posting an on-list
reply to this thread on the Public list. A vote in favor of
the motion must indicate a clear 'yes' in the response. A vote
against must indicate a clear 'no' in the response. A vote to
abstain must indicate a clear 'abstain' in the response.
Unclear responses will not be counted. The latest vote
received from any representative of a voting member before the
close of the voting period will be counted. Voting members are
listed here:
<a href="https://cabforum.org/members/" moz-do-not-send="true">https://cabforum.org/members/</a>
<o:p></o:p></p>
<p class="line874">In order for the motion to be adopted, two
thirds or more of the votes cast by members in the CA category
and greater than 50% of the votes cast by members in the
browser category must be in favor. Quorum is shown on
CA/Browser Forum wiki. Under Bylaw 2.2(g), at least the
required quorum number must participate in the ballot for the
ballot to be valid, either by voting in favor, voting against,
or abstaining.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
</body>
</html>