<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:792141600;
mso-list-type:hybrid;
mso-list-template-ids:472275768 -1720033968 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"\(%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:1143886255;
mso-list-template-ids:-601094680;}
@list l2
{mso-list-id:1321228299;
mso-list-template-ids:-1057072096;}
@list l3
{mso-list-id:1935552953;
mso-list-type:hybrid;
mso-list-template-ids:-1127057550 -235528360 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l3:level1
{mso-level-text:"\(%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">The CA/Browser Forum’s Bylaws at Section 2.3(c) allow the Forum Chair (currently me) to invite Interested Parties to participate in Working Group meetings.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><u>I hereby extend an invitation to Forum Interested Parties to participate in person or remotely in the all-day Validation Working Group meeting on Tuesday, March 6, 2018 at Amazon’s offices in Herndon, VA</u> (located near Dulles Airport).
If you are employed by a Forum member, please coordinate with your company’s regular Forum representatives. This invitation is for the Tuesday Validation Working Group meeting only, and does not extend to the Forum’s plenary sessions on Wednesday and Thursday.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">All Interested Parties who want to participate should send their name and contact information (email address and phone, preferably) to Tim Hollebeek and Wayne Thayer, [tim-dot-hollebeek-at-digicert –dot-com and
<span style="background:white">wthayer-at-mozilla-dot-com]. Tim and Wayne will provide you with additional details and logistics for participating in the meeting.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="background:white">To become an Interested Party who is eligible to participate, before the meeting you must sign and return a copy of the Forum’s ”</span><span style="border:none windowtext 1.0pt;padding:0in;background:white">Intellectual
Property Rights Agreement-1.2-PKI-enabled” found here: <o:p></o:p></span></p>
<p class="MsoNormal"><span style="border:none windowtext 1.0pt;padding:0in;background:white"><a href="https://cabforum.org/ipr-policy/">https://cabforum.org/ipr-policy/</a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:white"><a href="https://cabforum.org/wp-content/uploads/Intellectual-Property-Rights-Agreement-1.2-PKI-enabled.pdf">https://cabforum.org/wp-content/uploads/Intellectual-Property-Rights-Agreement-1.2-PKI-enabled.pdf</a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222;background:white">Participants must also follow the Forum’s Code of Conduct found at Exhibit C of the Bylaws,
<a href="https://cabforum.org/wp-content/uploads/CA-Browser-Forum-Bylaws-v.-1.7.pdf">
https://cabforum.org/wp-content/uploads/CA-Browser-Forum-Bylaws-v.-1.7.pdf</a> <o:p>
</o:p></span></p>
<p class="MsoNormal"><span style="color:#222222;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222;background:white">Thanks to all for your interest.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222;background:white">Kirk Hall, Chair<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222;background:white">CA/Browser Forum</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Public [mailto:public-bounces@cabforum.org] <b>
On Behalf Of </b>Tim Hollebeek via Public<br>
<b>Sent:</b> Monday, February 5, 2018 12:37 PM<br>
<b>To:</b> CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Subject:</b> [EXTERNAL][cabfpub] Recruiting experts for the Validation Summit<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">CA/Browser Forum Members,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I would like to invite you to consider who you may know who would be a valuable addition to the domain validation security analysis. It would be great if we could get participation from a wide variety of people who don’t normally participate
in CA/Browser discussions.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">As a reminder, we are going to be discussing topics like the following:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo3">
<![if !supportLists]><span style="mso-list:Ignore">(1)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>What is domain control/domain ownership/IP validation/validation of authorization intended to validate?<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo3">
<![if !supportLists]><span style="mso-list:Ignore">(2)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>How is validation typically done, for each method? Are there any vulnerabilities? Can they be fixed?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This is already an ambitious agenda, so we are looking for participants who can participate in an intelligent, constructive conversation without going off on too many tangents or descending into too many ratholes. I’ll be doing my best
to keep us on topic and moving forward.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It would be particularly helpful to have participants who have experience in the following areas:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l3 level1 lfo6">
<![if !supportLists]><span style="mso-list:Ignore">(1)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Real-world experience with the validation procedures as they are currently practiced by public certificate authorities<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l3 level1 lfo6">
<![if !supportLists]><span style="mso-list:Ignore">(2)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Experience with threat modeling, analyzing a variety of protocols, or other methods for rigorously analyzing processes and procedures for potential vulnerabilities<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l3 level1 lfo6">
<![if !supportLists]><span style="mso-list:Ignore">(3)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Deep technical expertise related to how validation-related technologies perform and/or fail in the real world (DNS, WHOIS, Domain Registrars, Reverse IP lookup, and so on)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l3 level1 lfo6">
<![if !supportLists]><span style="mso-list:Ignore">(4)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Technical challenges that prevent various validation methods from being usable by a significant fraction of certificate applicants, and thus drive users towards less desirable methods<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l3 level1 lfo6">
<![if !supportLists]><span style="mso-list:Ignore">(5)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Automation of validation protocols (i.e. ACME)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We will be collecting lists of participants and doing what we can to allow them to participate. In preparation for the March 6<sup>th</sup> meeting, we would ask that prospective participants be willing to participate in a special meeting
of the Validation Working Group on Thursday, March 1<sup>st</sup>, 11 am Eastern Time.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-Tim<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>