<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.m759619333099998097m-7701146035324797899hoenzb
{mso-style-name:m_759619333099998097m-7701146035324797899hoenzb;}
span.m759619333099998097hoenzb
{mso-style-name:m_759619333099998097hoenzb;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">All, Sorry for the delayed response as I was out on vacation. I definitely support the points made by Wayne below, specifically that a “browser” member’s essential requirement is for the member to make independent trust decisions on every
CA. Our root store supports server authentication, client authentication, secure email, code signing, time stamping, encrypting file system, document signing, EV server authorization, EV code signing, OCSP signing with each of these root cert EKUs specifically
called out in a formal contract between Microsoft and the CA. Thanks, Mike<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>From:</b> Public [mailto:public-bounces@cabforum.org] <b>
On Behalf Of </b>Wayne Thayer via Public<br>
<b>Sent:</b> Wednesday, December 13, 2017 2:20 PM<br>
<b>To:</b> Dean Coclin <dean.coclin@digicert.com>; CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Subject:</b> Re: [cabfpub] Browser eligibility in CABF in general (and Comodo specifically)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">This is indeed a difficult problem. Mozilla would like the membership criteria for browsers to reflect the role of making CA trust decisions while remaining as open and inclusive as possible. The existing rule
has been in place for many years and hasn’t been abused. Note that Comodo launched their browser years ago, but did not join as a browser until the CA business was spun off. We do however, share Ryan’s concern that the current rule may well lead to an outcome
in which the CAB Forum loses influence. Having many browser members will likely make it more difficult to agree on new policies, and that in turn will drive root store operators to use their power to unilaterally implement policies more frequently. In other
words, we can foresee a return to the situation that existed before the CAB Forum was established.<br>
<br>
We are not of the opinion that this is a neutral outcome; we believe the CAB Forum as currently structured benefits all parties.<br>
- CAs benefit by having one consistent policy to follow, and from the patent protections granted when those policies are enacted by the Forum.<br>
- Users benefit when browsers work together to enforce consistent policies, and when auditors verify those policies.<br>
- Browsers benefit from collaboration which produces better policies and in turn drives up quality in the industry.<br>
<br>
This issue can be resolved with an update to the browser membership rules. As Ryan noted, market share isn’t a good solution. The essential requirement is for the member to make independent trust decisions on every CA. This can happen by:<br>
- operating a Certificate Authority program that requires some vetting before every root is accepted to their program, or;<br>
- requiring each CA to enter into a contractual relationship with the root store operator before their roots are added to the root store.<o:p></o:p></p>
<div>
<p class="MsoNormal">While these requirements likely need some fine tuning, we believe they capture the main characteristic we should look for in a CAB Forum browser member. With the governance reform work nearing completion, we’d like to see these new criteria
adopted as part of the Server Certificate Working Group charter.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Wayne<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Mon, Dec 11, 2017 at 8:33 PM, Dean Coclin via Public <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">To specifically answer Eric’s original point, the Forum followed its bylaws (to the letter) in admitting Comodo browser as a member. There was no gray
area there and there was no special consideration made, just as none has been made in admitting any CA, Associate member or Interested Party. They applied, were told to provide the specific info requested by the bylaws, and once that was reviewed, admitted.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Now the point you raise (regarding running a root store) could be something to be discussed at a meeting and all you need to do is have the chair add
it to the agenda. If there’s enough interest, this could eventually lead to a change to the current bylaws.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">I should also point out that the Governance Reform Working Group is currently working on revised bylaws which, because of different types of members
contemplated, would divide into two different definitions: Issuers of Certificates and Consumers of Certificates (or something to that affect). Issuer is pretty clear (CAs). Browser is being changed to “consumer” since the Forum will likely take on other types
of certificates (i.e. SMIME, Code Signing, etc) where browsers don’t necessarily play a role but applications that “consume” such certificates do. Those applications may not necessarily run a root store.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Given that the new bylaws will allow for distinct working groups with their own member definitions, the TLS working group can define their own rules
for who can be an issuer and a consumer.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Dean</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a name="m_759619333099998097__MailEndCompose"><span style="color:#1F497D"> </span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> Public [mailto:<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Ryan Sleevi via Public<br>
<b>Sent:</b> Monday, December 11, 2017 11:12 AM<br>
<b>To:</b> Eric Mill <<a href="mailto:eric@konklone.com" target="_blank">eric@konklone.com</a>>; CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>><br>
<b>Subject:</b> Re: [cabfpub] Browser eligibility in CABF in general (and Comodo specifically)<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi Eric,<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I really appreciate you raising this point. I, too, am torn about this issue, and have been on the record expressing concerns going back for several years. To the extent the CA/Browser
Forum serves to facilitate open communication between CAs and the Root Stores they participate in, there is ostensibly some benefit in having as many root stores present. Google, representing ChromeOS and Android, Apple representing macOS, iOS and watchOS,
Microsoft representing Windows (and all the various products running Windows kernel or CryptoAPI, such as XBox), and Mozilla representing Firefox all represent potential points of friction for a CA that wishes to be ubiquitously trusted and ensure that there
are no conflicting requirements. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Yet, at the same time, it's questionable whether or not Comodo runs a root store, it's questionable whether there has ever been friction in CAs communicating with Comodo for purposes
of trust in their browser-based products, and it's questionable whether the bar should be such that any Chromium-derived or Firefox-derived browser should qualify, for the reasons you mention. I think a natural consequence of both Comodo's participation specifically
and the potential membership under the Bylaws is that we will increasingly see the Forum become less relevant as the place for agreeing upon common baselines, and more as a place purely for discussion around trends in the industry. That's not to say I don't
anticipate there being some updates to the Forum's documents - when it aligns with both browsers and CAs interests - but I suspect that increasingly, the forward-thinking moves towards security will happen outside the Forum, through the respective root programs.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I, too, don't have good suggestions on how to solve the membership problem. On the one hand, having a Forum for discussion, with the IP protections some members desire, serves as
a great benefit for the community. It allows browsers to solicit CAs' feedback about upcoming or planned policy changes, and allows for collaboration among browsers to avoid conflicting requirements. Having an open membership - including that of interested
parties - helps provide robust discussion. Yet on the other hand, the voting structure of the Forum, coupled with the misguided notion that the Forum 'leads' rather than follows the browser/root store members' program changes, lead to the situation you point
out. Attempting to resolve that via excluding participation may not be ideal - although notably, Comodo could have joined as an Interested Party. Proportional voting might be more reflective of the dynamic and purpose of the Forum, if we want to still maintain
documents going forward, but in order to achieve that, one must have a good definition of the issue.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">For example, one could measure by end-user browser share, but finding an appropriate measure of that can vary (for example, installations). Further, it can incentivize certain OS
vendors to restrict and/or block competition from other browsers on their platforms, whether through outright policies or through making it exceptionally difficult to change the browser, even more than they do today. Alternatives, such as measuring on 'number
of pages loaded' or 'connections made' are complicated - after all, cURL, as the most popular library on billions of devices, may want to be represented, although they alternatively use the OS store (if the SecureTransport/SChannel backend), a user-supplied
store (most frequently, the Mozilla store), or a vendor-specific store (in the case of the Wii U, Switch, PS3 or PS4, for example). How to defer that representation?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I note I didn't really offer any solutions - Comodo's joining as a browser may very well herald the start of the decline of the Forum's relevance as an SDO, and more into what it
originally served as - a Forum for browser members to explore changes and deconflict them, but without waiting for or needing the approval of CA members or other browsers. And I don't think that's necessarily a bad thing, especially for users that care about
security and benefit from browsers that are able to do the right thing.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Sun, Dec 10, 2017 at 11:21 PM, Eric Mill via Public <<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Does no one have thoughts on this? <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I can understand how CAs and Browsers both might find it difficult to discuss this aspect of the Forum in their official capacities. Perhaps there are other Interested Parties on
the list with an opinion?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">-- Eric<o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Sun, Dec 3, 2017 at 8:52 PM, Eric Mill <<a href="mailto:eric@konklone.com" target="_blank">eric@konklone.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I saw on the draft agenda, sent around on the 27th for last week's call, included "Membership Application of Comodo Security Solutions, Inc. (as a browser)".<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I know it will take some time for the minutes of the call to be posted with the result of Comodo's application, but this seemed like a significant application that merits public
discussion.<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The Bylaws don't apply any rules about market share or other indicators of significance to the marketplace:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fwp-content%2Fuploads%2FCA-Browser-Forum-Bylaws-v.-1.7.pdf&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C1%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=wjV5cTu%2FgXlNcbsguq7tbOpyHjPpuoXO%2BlKHp4VWEt0%3D&reserved=0" target="_blank">https://cabforum.org/wp-content/uploads/CA-Browser-Forum-Bylaws-v.-1.7.pdf</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The entirety of the eligibility clause for Browsers states: "The member organization produces a software product intended for use by the general public for browsing the Web securely."<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The CA eligibility clause is significantly more constrained, in particular in that the certificates have to be recognized by Browser members. However, this makes the set of Browser
members even more important in determining eligibility of CAs.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Comodo appears to publish two browsers, Dragon and IceDragon, based on Chromium and Firefox, respectively:
<a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.comodo.com%2Fhome%2Fbrowsers-toolbars%2Finternet-products.php&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=vzKRzVEr5P78Jbi4oF9%2FoR0%2FmE3%2BBqUQaPphevIPy9I%3D&reserved=0" target="_blank">
https://www.comodo.com/home/browsers-toolbars/internet-products.php</a> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">They don't appear to operate a root program or exercise independent discretion about what CAs are trusted on their platform in any visible way, they've never participated as a browser
in any significant public conversations about the Web PKI that I've seen, and their market share appears to be negligible from all available public data.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">But the Bylaws would seem to allow Comodo to join as a browser, which I think would significantly undermine the entire point of the Forum -- as well as potentially open a floodgate
of applications from more marginal or almost-fictional browsers.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">For a quick glance at how many browsers theoretically could join the Forum under the current bylaws, a long list of them can be in these daily-updated feeds of browsers (as their
user agent appears in Google Analytics) that have at least 10 visits over 90 days to government properties:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fanalytics.usa.gov%2Fdata%2Flive%2Fbrowsers.csv&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=ltvE7CFVtTGCZaeR2JirBJVPE9iBVXtrcFQT93EVMao%3D&reserved=0" target="_blank">https://analytics.usa.gov/data/live/browsers.csv</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fanalytics.usa.gov%2Fdata%2Flive%2Fbrowsers.json&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=nAkhKV4zlsGxtC9JPxnn2xB9yn4wH2uDZM%2BXCZGPgkE%3D&reserved=0" target="_blank">https://analytics.usa.gov/data/live/browsers.json</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Market share may or may not be the right threshold, and I don't have some specific text to suggest off the top of my head -- but it does feel like a discussion is merited about
whether the Bylaws around browser eligibility adequately capture the intent of the Forum.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888">-- Eric</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="m759619333099998097m-7701146035324797899hoenzb"><span style="color:#888888">--
</span></span><o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkonklone.com&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=DZznzEJTUMxq%2BwP1EfQqCssJHW2Q0XBDCH0ssxBT5Ko%3D&reserved=0" target="_blank">konklone.com</a><span style="color:#888888">
| </span><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fkonklone&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=ImKVho1glKMyZKWi0BvkpB%2Fn2WaNTHYkqcPNiw88a0o%3D&reserved=0" target="_blank">@konklone</a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="m759619333099998097hoenzb"><span style="color:#888888">--
</span></span><o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkonklone.com&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=DZznzEJTUMxq%2BwP1EfQqCssJHW2Q0XBDCH0ssxBT5Ko%3D&reserved=0" target="_blank">konklone.com</a><span style="color:#888888">
| </span><a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fkonklone&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=ImKVho1glKMyZKWi0BvkpB%2Fn2WaNTHYkqcPNiw88a0o%3D&reserved=0" target="_blank">@konklone</a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><br>
_______________________________________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org" target="_blank">Public@cabforum.org</a><br>
<a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fmailman%2Flistinfo%2Fpublic&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=Hk01y1L4Pe0m3%2F%2Fc8VCY22Gg8TmAnSCRw2FBJOKlR1s%3D&reserved=0" target="_blank">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org">Public@cabforum.org</a><br>
<a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcabforum.org%2Fmailman%2Flistinfo%2Fpublic&data=04%7C01%7CMike.Reilly%40microsoft.com%7Cf8ad604c27644767e8b808d54277ac20%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636488004174956548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=Hk01y1L4Pe0m3%2F%2Fc8VCY22Gg8TmAnSCRw2FBJOKlR1s%3D&reserved=0" target="_blank">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>