<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">That looks much better then what I posted – I agree.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Dimitris Zacharopoulos [mailto:jimmy@it.auth.gr]
<br>
<b>Sent:</b> Sunday, July 22, 2018 10:39 AM<br>
<b>To:</b> Kirk Hall <Kirk.Hall@entrustdatacard.com>; CA/Browser Forum Public Discussion List <public@cabforum.org><br>
<b>Subject:</b> [EXTERNAL]Re: [cabfpub] Draft Ballot to establish new SCWG Network Security Subcommittee<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Kirk,<br>
<br>
About the NetSec Subcommittee, I believe we should take into account the conclusion paragraph of the
<a href="https://cabforum.org/pipermail/public/2018-June/013587.html">deliverable</a> published on June 22nd 2018. The conclusion was not to "scrap" the NetSec Guidelines. I propose the following:<br>
<br>
--- BEGIN ---<br>
<br>
The Server Certificate Working Group formally establishes the <b>Network Security Subcommittee</b> as an official Subcommittee.<br>
<br>
<b>Scope: </b>Revising and improving the Network and Certificate Systems Security Requirements (NCSSRs).
<br>
<br>
<b>Out of Scope: </b>No provision.<br>
<br>
<b>Deliverables: </b>The Network Security Subcommittee shall produce one or more documents offering options to the Forum for establishing minimal security standards within the scope defined above. These renewed NCSSR documents will serve CAs, auditors and browsers
in giving a state of the art set of rules for the deployment and operation of CAs computing infrastructures.<br>
<br>
<b>Within the scope of the SCWG Charter:</b> Yes<br>
<br>
<b>End Date: </b>None<br>
<br>
--- END---<br>
<br>
Best regards,<br>
Dimitris.<span style="font-size:12.0pt"><o:p></o:p></span></p>
<div>
<p class="MsoNormal">On 22/7/2018 4:47 πμ, Kirk Hall via Public wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">No matter what procedure we choose for establishing new SCWG Subcommittees, we will need a formal scope for each Subcommittee. This is a first draft of such a scope for the Network Security Subcommittee.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The existing Network Security WG was created by Ballot 203. <a href="https://cabforum.org/2017/06/19/ballot-203-formation-network-security-working-group">https://cabforum.org/2017/06/19/ballot-203-formation-network-security-working-group</a>
I have slightly modified the language of that ballot to create a SCWG Subcommittee – this would be the language of a Ballot. Please offer edits – simpler is better. We can try to finalize on our SCWG teleconference on July 26.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Because the previous Working Group had a sunset date, I added a sunset of Sept. 1, 2020 (two years).<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The Server Certificate Working Group formally establishes the
<b><u>Network Security Subcommittee</u></b> as an official Subcommittee of the SCWG.
</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white">
<b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Scope</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">: Consider options for revising, replacing or scrapping the Network Security Guidelines.
</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;background:white"><b>Out of Scope: </b>
No provision.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;background:white"><b> </b><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white">
<b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Deliverables</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">:
<b>Deliverables</b>: </span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">1. Reports with one or more proposals for the future of the Network Security Guidelines.</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">2. For proposals involving replacement, details of the availability and applicability of the proposed alternative, and what modifications if any would be needed to it in order to make it suitable
for use.</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">3. For proposals involving revision, details of the revisions that are deemed necessary and how the document will be kept current in the future.</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">4. For proposals involving scrapping, an explanation of why this is preferable to either of the other two options.</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">5. If there are multiple proposals, optionally a recommendation as to which one to pursue and an associated timeline.</span><o:p></o:p></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;background:white">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">6. A form of ballot or ballots to implement any recommendations.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;background:white"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;background:white"><b>Within the scope of the SCWG Charter</b>: Yes<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;background:white"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;background:white"><b>End Date: </b>September 1, 2020<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Public mailing list<o:p></o:p></pre>
<pre><a href="mailto:Public@cabforum.org">Public@cabforum.org</a><o:p></o:p></pre>
<pre><a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p> </o:p></span></p>
</div>
</body>
</html>