<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>SSL.com votes YES.<br>
<br>
csk<br>
</p>
<br>
<div class="moz-cite-prefix">On 10/12/2017 1:04 PM, Ben Wilson via
Public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:SN1PR14MB0175F77271EE6A0C85735A6AF14B0@SN1PR14MB0175.namprd14.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.line867, li.line867, div.line867
{mso-style-name:line867;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2002268552;
mso-list-template-ids:-1117598782;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="line867"><strong><span
style="font-family:"Calibri",sans-serif">Ballot
208 - dnQualifiers</span></strong> <o:p></o:p></p>
<p class="line874">This ballot allows CAs to use dnQualifiers in
certificates to partition groups of certificates into
different sets and to allow non-identity information to be
included in DV certificates. <o:p></o:p></p>
<p class="line862">The following motion has been proposed by
Peter Bowen of Amazon and endorsed by Ben Wilson of DigiCert
and Ryan Sleevi of Google. <o:p></o:p></p>
<p class="line874">-- MOTION BEGINS -- <o:p></o:p></p>
<p class="line874">In the Baseline Requirements, REPLACE the
definition of "Subject Identity Information" with: <o:p></o:p></p>
<p class="line874">"Information that identifies the Certificate
Subject. Subject Identity Information does not include
[strikeout]<s>a domain name listed in the subjectAltName
extension or the Subject commonName field</s>[/strikeout]
[insert]<u>dnQualifier attributes in Distinguished Names,
commonName attributes in Distinguished Names, dNSName
Subject Alternative Names, iPAddress Subject Alternative
Names, or SRVName Subject Alternative Names</u>[/insert]." <o:p></o:p></p>
<p class="line874">In Section 7.1.4.2.2 Subject Distinguished
Name Fields, re-letter "j" (Other Subject Attributes) as
letter "k" and INSERT a new subsection j. that reads: <o:p></o:p></p>
<p class="line874">j. Certificate Field: subject:dnQualifier <o:p></o:p></p>
<ul type="disc">
<li class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l0
level1 lfo1">Optional. Contents: This field is intended to
be used when several certificates with the same subject can
be partitioned into sets of related certificates. Each
related certificate set MAY have the same dnQualifier. The
CA may include a dnQualifier attribute with a zero length
value to explicitly indicate that the CA makes no assertion
about relationship with other certificates with the same
subject. The CA MAY set the dnQualifer value to the base64
encoding of the SHA1 hash of the subjectAlternativeName
extnValue if it wishes to indicate grouping of certificates
by alternative name set. <o:p></o:p></li>
</ul>
<p class="line874">-- MOTION ENDS -- <o:p></o:p></p>
<p class="line874">The procedure for approval of this Final
Maintenance Guideline ballot is as follows (exact start and
end times may be adjusted to comply with applicable Bylaws and
IPR Agreement): <o:p></o:p></p>
<p class="line874">BALLOT 208 Status: Final Maintenance
Guideline Start time (22:00 UTC) End time (22:00 UTC) <o:p></o:p></p>
<p class="line874">Discussion begins October 12, 2017 22:00 UTC
and ends October 19, 2017 22:00 UTC (7 days) <o:p></o:p></p>
<p class="line874">Vote for approval begins October 19, 2017
22:00 UTC and ends October 26, 2017 22:00 UTC (7 days) <o:p></o:p></p>
<p class="line874">If vote approves ballot: Review Period (Chair
to send Review Notice) (30 days). If Exclusion Notice(s)
filed, ballot approval is rescinded and PAG to be created. If
no Exclusion Notices filed, ballot becomes effective at end of
Review Period. Upon filing of Review Notice by Chair 30 days
after filing of Review Notice by Chair <o:p></o:p></p>
<p class="line874">From Bylaw 2.3: If the Draft Guideline Ballot
is proposing a Final Maintenance Guideline, such ballot will
include a redline or comparison showing the set of changes
from the Final Guideline section(s) intended to become a Final
Maintenance Guideline, and need not include a copy of the full
set of guidelines. Such redline or comparison shall be made
against the Final Guideline section(s) as they exist at the
time a ballot is proposed, and need not take into
consideration other ballots that may be proposed subsequently,
except as provided in Bylaw Section 2.3(j). <o:p></o:p></p>
<p class="line862">Votes must be cast by posting an on-list
reply to this thread on the Public list. A vote in favor of
the motion must indicate a clear 'yes' in the response. A vote
against must indicate a clear 'no' in the response. A vote to
abstain must indicate a clear 'abstain' in the response.
Unclear responses will not be counted. The latest vote
received from any representative of a voting member before the
close of the voting period will be counted. Voting members are
listed here: <a href="https://cabforum.org/members/"
moz-do-not-send="true">https://cabforum.org/members/</a> <o:p></o:p></p>
<p class="line874">In order for the motion to be adopted, two
thirds or more of the votes cast by members in the CA category
and greater than 50% of the votes cast by members in the
browser category must be in favor. Quorum is shown on
CA/Browser Forum wiki. Under Bylaw 2.2(g), at least the
required quorum number must participate in the ballot for the
ballot to be valid, either by voting in favor, voting against,
or abstaining. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Chris Kemmerer
Manager of Operations
SSL.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~ To find the reefs, look~~~~~~~~
~~~~ for the wrecks. ~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</pre>
</body>
</html>