<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>SSL.com votes YES.<br>
<br>
csk<br>
</p>
<br>
<div class="moz-cite-prefix">On 12/7/2017 10:52 AM, Ryan Sleevi via
Public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CACvaWvYue_e90-efJPkuyYeWLV498ovbf=pAfPYGRDDnMeUhKA@mail.gmail.com">
<div dir="ltr"><b>Ballot 217: Sunset RFC 2527</b>
<div><br>
</div>
<div>Purpose of Ballot: The Baseline Requirements and Extended
Validation Guidelines require that CA's disclosures of the
Certificate Policy and/or Certification Practice Statements
include all of the material required by either RFC 2527 or RFC
3647 and structured in accordance with RFC 2527 or RFC 3647.</div>
<div><br>
</div>
<div>RFC 2527 is an obsolete RFC, published in 1999, and
replaced by RFC 3647 in 2003. This sunsets the use of RFC
2527, ensuring that CAs' disclosures will follow a consistent
pattern across the industry, facilitating easier review by
Subscribers, Browsers, and the broader community. Based upon
Member feedback, 6 months is provided for CAs to review and
update their CP/CPS documents.</div>
<div><br>
</div>
<div>This motion aligns the language to be consistent between
the BRs and the EVGs. For the benefit of minimal changes, this
aligns the existing language through duplication, rather than
attempting to incorporate the BRs by reference. </div>
<div><br>
</div>
<div>The following motion has been proposed by Ryan Sleevi of
Google and endorsed by Tim Hollebeek of DigiCert and Dimitris
Zacharopoulos of HARICA.</div>
<div><br>
</div>
<div><b>-- MOTION BEGINS --</b></div>
<div><br>
</div>
<div>This ballot modifies the "Baseline Requirements for the
Issuance and Management of Publicly-Trusted Certificates" as
follows, based upon Version 1.5.1:</div>
<div><br>
</div>
<div>In Section 2.2, replace the text:</div>
<div>"The CA SHALL publicly disclose its Certificate Policy
and/or Certification Practice Statement through an appropriate
and readily accessible online means that is available on a
24x7 basis. The CA SHALL publicly disclose its CA business
practices to the extent required by the CA's selected audit
scheme (see Section 8.1). The disclosures MUST include all the
material required by RFC 2527 or RFC 3647, and MUST be
structured in accordance with either RFC 2527 or RFC 3647. "</div>
<div><br>
</div>
<div>with the following:</div>
<div>"The CA SHALL publicly disclose its Certificate Policy
and/or Certification Practice Statement through an appropriate
and readily accessible online means that is available on a
24x7 basis. The CA SHALL publicly disclose its CA business
practices to the extent required by the CA's selected audit
scheme (see Section 8.1).</div>
<div><br>
</div>
<div>Effective as of 31 May 2018, the Certificate Policy and/or
Certification Practice Statement MUST be structured in
accordance with RFC 3647. Prior to 31 May 2018, the
Certificate Policy and/or Certification Practice Statement
MUST be structured in accordance with either RFC 2527 or RFC
3647. The Certificate Policy and/or Certification Practice
Statement MUST include all material required by RFC 3647 or,
if structured as such, RFC 2527."<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>This ballot modifies the "Guidelines for the Issuance and
Management of Extended Validation Certificates" as follows,
based on Version 1.6.6:</div>
<div><br>
</div>
<div>In Section 8.2.2, replace the text:</div>
<div>"Each CA MUST publicly disclose their EV Policies through
an appropriate and readily accessible online means that is
available on a 24x7 basis. The CA is also REQUIRED to
publicly disclose its CA business practices as required by
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.
The disclosures MUST be structured in accordance with either
RFC 2527 or RFC 3647."</div>
<div><br>
</div>
<div>With the following:</div>
<div>"Each CA MUST publicly disclose its Certificate Policy
and/or Certification Practice Statement through an appropriate
and readily accessible online means that is available on a
24x7 basis. The CA SHALL publicly disclose its CA business
practices to the extent required by the CA's selected audit
scheme (see Section 17.1).</div>
<div><br>
</div>
<div>Effective as of 31 May 2018, the CA's Certificate Policy
and/or Certification Practice Statement MUST be structured in
accordance with RFC 3647. Prior to 31 May 2018, the CA's
Certificate Policy and/or Certification Practice Statement
MUST be structured in accordance with either RFC 2527 or RFC
3647. The Certificate Policy and/or Certification Practice
Statement MUST include all material required by RFC 3647 or,
if structured as such, RFC 2527."</div>
<div><br>
</div>
<div><b>-- MOTION ENDS --</b></div>
<div><br>
The procedure for approval of this ballot is as follows:</div>
<div><br>
</div>
<div>Discussion (7 to 14 days)</div>
<div>Start Time: 2017-12-07 22:00:00 UTC</div>
<div>End Time: 2017-12-14 22:00:00 UTC</div>
<div><br>
</div>
<div>Vote for approval (7 days)</div>
<div>Start Time: 2017-12-14 22:00:00 UTC</div>
<div>End Time: 2017-12-21 22:00:00 UTC</div>
<div><br>
</div>
<div>
<div>Votes must be cast by posting an on-list reply to this
thread on the Public list. A vote in favor of the motion
must indicate a clear 'yes' in the response. A vote against
must indicate a clear 'no' in the response. A vote to
abstain must indicate a clear 'abstain' in the response.
Unclear responses will not be counted. The latest vote
received from any representative of a voting member before
the close of the voting period will be counted. Voting
members are listed here: <a
href="https://cabforum.org/members/"
moz-do-not-send="true">https://cabforum.org/members/</a></div>
<div><br>
</div>
<div>In order for the motion to be adopted, two thirds or more
of the votes cast by members in the CA category and greater
than 50% of the votes cast by members in the browser
category must be in favor. Quorum is shown on CA/Browser
Forum wiki. Under Bylaw 2.2(g), at least the required quorum
number must participate in the ballot for the ballot to be
valid, either by voting in favor, voting against, or
abstaining.</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Chris Kemmerer
Manager of Operations
SSL.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~ To find the reefs, look~~~~~~~~
~~~~ for the wrecks. ~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</pre>
</body>
</html>