<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:820390843;
mso-list-template-ids:-1539117972;}
@list l0:level1
{mso-level-start-at:3;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:908073770;
mso-list-template-ids:-2106851088;}
@list l1:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2
{mso-list-id:1690447474;
mso-list-type:hybrid;
mso-list-template-ids:-2131999966 -1223424446 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l2:level1
{mso-level-text:"\(%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3
{mso-list-id:1787891827;
mso-list-template-ids:1613636240;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Tim, if I recall correctly, you were the one a few days ago that suggested we give CAs and browsers who have signed the IPRA v1.3 but have not indicated an intent to participate in the SCWG an additional 60 days to declare their intent to participate, right? And I agreed with your suggestion. So I don’t think anyone who has signed the IPRA loses their current membership status for the next 60 days, thanks to your suggestion.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Man, who knew this could be so complicated? If I understand your position correctly, a CA or browser can immediately claim SCWG membership simply by submitting the IPRA, saying it meets the WG membership requirements, declaring interest in participating in the WG, and saying “therefore I’m a WG member”, correct? All self-assertion. But what if Freedonia CA (or Freedonia Browser), whom we’ve never hear of, does that? Is Freedonia CA automatically a member of the WG as of today? (I don’t think so.)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>To finish this up, let’s just both be right – you can assert your interpretation of what it takes to be a WG member (basically returning the IPRA, showing interest in participation, and automatically becoming a WG member with no review from other Forum members) – that’s fine, and it will do no harm so long as no difficult questions arise before July 12 like who can vote, etc. I will then proceed on the July 12 initial teleconference meeting of the SCWG as I have indicated, listing who has effectively applied for membership of the SCWG, indicating they appear to qualify, and ask if anyone has an objection. That way we have it covered.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I’m taking some time off for the holiday, so may not be able to respond to further discussion on this topic.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Tim Hollebeek [mailto:tim.hollebeek@digicert.com] <br><b>Sent:</b> Tuesday, July 3, 2018 12:07 PM<br><b>To:</b> Kirk Hall <Kirk.Hall@entrustdatacard.com>; CA/Browser Forum Public Discussion List <public@cabforum.org><br><b>Subject:</b> [EXTERNAL]RE: [cabfpub] Is DigiCert a member of the Server Certificate Working Group?<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The problem with that interpretation is that as of tomorrow, all members are not members of the Server Certificate Working Group, and by the Bylaws, their membership in the Forum immediately ceases. If I have to, I will dispute Entrust’s membership under the bylaws if that’s what it is going to take in order to get clarity on working group membership, and to get the Bylaws enforced as written, without additional ad hoc unwritten criteria. The chair will then have five working days to investigate his employer’s membership, and hopefully will come to the conclusion that Entrust is in fact a member of the SCWG, and their membership will not immediately cease. I’m optimistic that the same courtesy will also be extended to all other similarly situated members after that experience.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I would strongly prefer to see the process implemented the way the Governance Reform Working Group intended for it to be implemented. This arbitrary and unnecessary delay serves no purpose other than to obstruct the functioning of the working group. I have a ballot one of the browsers has asked us to post for the group’s consideration, and the Bylaws make it very clear that we have the right to post it.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-Tim<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Kirk Hall [<a href="mailto:Kirk.Hall@entrustdatacard.com">mailto:Kirk.Hall@entrustdatacard.com</a>] <br><b>Sent:</b> Tuesday, July 3, 2018 2:32 PM<br><b>To:</b> Tim Hollebeek <<a href="mailto:tim.hollebeek@digicert.com">tim.hollebeek@digicert.com</a>>; CA/Browser Forum Public Discussion List <<a href="mailto:public@cabforum.org">public@cabforum.org</a>><br><b>Subject:</b> [cabfpub] Is DigiCert a member of the Server Certificate Working Group?<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Tim, you have explained your position very well, and it’s clearly one reasonable interpretation of Ballot 206 and the new Bylaws as to how we establish the initial membership of the new Server Certificate Working Group.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>As the initial Chair of the SCWG under Ballot 206, I plan to take a slightly different approach, but I don’t think it interferes with what you want to do. Various people have noted in the past couple of weeks that Ballot 206 didn’t really provide a clear process for establishing who were initial SCWG members – maybe we should add language to new WG Charters in the future to solve that issue.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='text-autospace:none'>We do have a process in our Bylaws for how we admit new Members to the Forum itself at Bylaw 2.1(c), which provides: <o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in;text-autospace:none'>“An Applicant shall become a Member <u>once the Forum has determined by consensus among the Members during a Forum Meeting or Forum Teleconference</u> that the Applicant <u>meets</u> all of the requirements of subsection (a) or, upon the request of any Member, by a Ballot among the Members. Acceptance by consensus shall be determined or a Ballot of the Members shall be held as soon as the Applicant indicates that it has presented all information required under subsection (b) and has responded to all follow-up questions from the Forum and the Member has complied with the requirements of Section 5.5.” <o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><o:p> </o:p></p><p class=MsoNormal style='text-autospace:none'>So I plan to mimic that procedure on our July 12 organizational teleconference for the SCWG by listing the Forum members who have signed the IPRA and indicated an intent to participate on the SCWG, saying these companies appear to qualify for SCWG membership under the SCWG Charter, and asking if the anyone believes that any of the Forum members on the list do not qualify for serving as members on the SCWG. I expect there will be no objections, and therefore we will have established by consensus on a teleconference that all the Forum members who signed the IPRA and indicated interest in participation are initial members of the SCWG. (That’s kind of like the purpose of your email below, but more efficient as it covers all members at once.) This will take maybe 30 seconds, then we will get to work.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Public [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Tim Hollebeek via Public<br><b>Sent:</b> Tuesday, July 3, 2018 10:23 AM<br><b>To:</b> CABFPub <<a href="mailto:public@cabforum.org">public@cabforum.org</a>><br><b>Subject:</b> [EXTERNAL][cabfpub] Is DigiCert a member of the Server Certificate Working Group?<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The Server Certificate Working Group has existed for a long time. Ballot 206 approved its charter (item 3), effective immediately. The 90 day waiting period only affects the Bylaws and IPR policy.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>As stated on the governance reform working group, the intent was to mirror the functioning of the existing forum whenever possible. As such, it cannot be the case that the charter refers to Ben Wilson and Kirk Hall in their personal capacity. This argument was never made during the development of the ballot, and was not the intent. Indeed, neither has signed the IPR policy in their personal capacity, and are ineligible to serve as chair or vice chair of the forum in their personal capacity (“The offices of Chair and Vice Chair may only be filled by Forum Member representatives”). If it was intended that officers of the SCWG were to serve in their personal capacity, unlike the main forum, the charter would have certainly pointed out that important difference.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I think it’s quite clear that both persons are serving in their professional capacity as representatives of their member companies. I stated on several occasions that my reading was that DigiCert and Entrust would be the first two new members of the SCWG, and no one disagreed with me. I even brought up the exotic side case of “what happens if DigiCert or Entrust doesn’t sign the IPR policy?” and was rightly accused of being paranoid and was assured that wouldn’t happen. Both companies have expressed interest in joining the SCWG, and both have signed the new IPR policy, so I think it’s clear at least that those two companies are members.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Even if that argument doesn’t hold, they are also members for the same reason I believe the SCWG currently has a bunch of other members as well, since all they have to do is sign the new IPR policy and declare their intent to participate. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The Vice Chair suggested three methods of declaring intent to participate:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l2 level1 lfo3'><![if !supportLists]><span style='mso-list:Ignore'>(1)<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>email the public list, and formally declare their participation in the Server Certificate Working Group<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In case previous declarations have not sufficed, I hereby formally declare that DigiCert is participating in the Server Certificate Working Group. I am willing to repeat this declaration at any time and using any reasonable method.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l2 level1 lfo3'><![if !supportLists]><span style='mso-list:Ignore'>(2)<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>subscribe to the mailing list -<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Yup, I’m on it.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l2 level1 lfo3'><![if !supportLists]><span style='mso-list:Ignore'>(3)<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>list self on wiki page<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We’re on it. By my count, the number of members already exceeds the quorum of ten.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>So the Server Certificate Working Group exists and has members. YAY! Anyone else disagree, and more importantly, can you justify your beliefs using the bylaws?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-Tim<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>