<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Oct 24, 2017, at 11:06 AM, Ben Wilson via Public <<a href="mailto:public@cabforum.org" class="">public@cabforum.org</a>> wrote:</div><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><p class="MsoNormalCxSpMiddle"><b class="">Members eligible to participate</b>: The Working Group shall consist of two classes of voting members, the CA Class and the Browser Class. The CA Class shall consist of eligible Issuing CAs and Root CAs meeting the following criteria: <span class="Apple-converted-space"> </span><o:p class=""></o:p></p><p class="MsoNormalCxSpMiddle"><o:p class=""> </o:p></p><p class="MsoNormalCxSpMiddle">(1) Issuing CA: The member organization operates a certification authority that has a current and successful WebTrust for CAs audit, or ETSI TS 102042, ETSI 101456, or ETSI EN 319 411-1 audit report prepared by a properly-qualified auditor, and that actively issues certificates to Web servers that are openly accessible from the Internet, such certificates being treated as valid when using a browser created by a Browser member. Applicants that are not actively issuing certificates but otherwise meet membership criteria may be granted Associate Member status under Bylaw Sec. 3.1 for a period of time to be designated by the Forum.<o:p class=""></o:p></p><p class="MsoNormalCxSpMiddle"><o:p class=""> </o:p></p><p class="MsoNormalCxSpMiddle">(2) Root CA: The member organization operates a certification authority that has a current and successful WebTrust for CAs, or ETSI TS 102042, ETSI TS 101456, ETSI EN 319 411-1 audit report prepared by a properly-qualified auditor, and that actively issues certificates to subordinate CAs that, in turn, actively issue certificates to Web servers that are openly accessible from the Internet, such certificates being treated as valid when using a browser created by a Browser member. Applicants that are not actively issuing certificates but otherwise meet membership criteria may be granted Associate Member status under Bylaw Sec. 3.1 for a period of time to be designated by the Forum.<o:p class=""></o:p></p><p class="MsoNormalCxSpMiddle"><o:p class=""> </o:p></p><p class="MsoNormalCxSpMiddle">A Non-CA member eligible to participate in the Browser Class is an organization that produces a software product intended for use by the general public for browsing the Web securely.<o:p class=""></o:p></p><p class="MsoNormalCxSpMiddle"><o:p class=""> </o:p></p><p class="MsoNormalCxSpMiddle">The Working Group shall include Interested Parties and Associate Members as defined in the Bylaws. <o:p class=""></o:p></p></div></div></blockquote><br class=""></div><div>Shouldn’t organizations that meet the Issuing CA or Root CA criteria that also produce a software product intended for use by the general public for browsing the Web securely have the option of whether to participate as a CA Class or Browser Class member? Otherwise I think we will be down to Mozilla and Opera as Browser Class members.</div><div><br class=""></div><div>Thanks,</div><div>Peter</div><br class=""></body></html>