<div dir="ltr"><div dir="ltr"><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><font face="Tahoma, sans-serif">Firmaprofesional votes NO </font><span style="color:rgb(0,0,0)">on Ballot SC31 v3, mainly for one reason: a</span><span style="color:rgb(0,0,0)"> ballot to add root program provisions to the BRs should only include non-controversial issues that everyone supports by consensusand not to include issues </span>previously rejected in other ballots, <span style="color:rgb(0,0,0)">such as </span><span style="color:rgb(0,0,0)"> </span><span style="color:rgb(0,0,0)">limiting certificates to 398 days.</span></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><font face="Tahoma, sans-serif"><br></font></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><font face="Tahoma, sans-serif"><b>Chema López</b></font></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><span style="font-family:Tahoma,sans-serif">Director Área Innovación, Cumplimiento y Tecnología</span><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><span style="font-family:Tahoma,sans-serif">+34 666 429 224</span><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><u style="font-family:Tahoma,sans-serif"> </u><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><img src="https://www.firmaprofesional.com/wp-content/uploads/2019/07/Firmaprofesional_Digital_Color_Pequeno.png"><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><span style="color:rgb(102,102,102);font-family:Tahoma,sans-serif"><b>Barcelona </b></span><span style="color:rgb(102,102,102);font-family:Tahoma,sans-serif">Av. Torre Blanca 57, </span><span style="color:rgb(102,102,102);font-family:Tahoma,sans-serif">Edif. Esadecreapolis, Local 3B6 - </span><span style="color:rgb(102,102,102);font-family:Tahoma,sans-serif">08173 Sant Cugat del Vallès | </span><span style="color:rgb(102,102,102);font-family:Tahoma,sans-serif">+34 934 774 245</span></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><font color="#666666" face="Tahoma, sans-serif"><b>Madrid </b>C/ Velázquez 59, 1º Ctro-Izda. - 28001 Madrid | +34 915 762 181</font></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><br></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><span style="font-family:Tahoma,sans-serif"><a href="http://www.firmaprofesional.com/" style="color:rgb(17,85,204)" target="_blank"><font color="#ff0000">www.firmaprofesional.com</font></a><b><font color="#ff0000"></font></b></span></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><b><span style="font-family:Tahoma,sans-serif;color:red"><br></span></b></p><p class="MsoNormal" style="margin-bottom:0.0001pt;line-height:normal"><i><span style="color:rgb(153,153,153);font-family:tahoma,sans-serif;font-size:x-small">El contenido de este correo electrónico y de sus anexos es confidencial. Si usted recibe este mensaje por error, debe saber que está prohibido hacer uso, divulgación y/o copia del mismo. En tal caso le agradeceríamos que advierta de inmediato a su remitente y que proceda a destruir el mensaje.</span><br></i></p><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;line-height:normal"><font color="#999999" face="tahoma, sans-serif" size="1"><i> </i></font></p><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;line-height:normal"><i><font size="1"><font color="#999999" face="tahoma, sans-serif">Le informamos que, cumpliendo la normativa en materia de protección de datos, FIRMAPROFESIONAL tratará sus datos con la finalidad de garantizar las relaciones con la empresa, entidad u organización a la que usted representa o en la que trabaja y por el período que dure dicha relación. </font><span style="color:rgb(153,153,153);font-family:tahoma,sans-serif">Podrá ejercer sus derechos de acceso, rectificación, supresión, limitación, portabilidad y oposición al tratamiento ante el Responsable: FIRMAPROFESIONAL, S.A., Av. Torre Blanca, 57, local 3B6 (Edificio Esadecreapolis), 08173 Sant Cugat del Vallès (Barcelona), o bien mediante correo electrónico a: </span><a href="mailto:rgpd@firmaprofesional.com" style="color:rgb(17,85,204);font-family:tahoma,sans-serif" target="_blank">rgpd@firmaprofesional.com</a><span style="color:rgb(153,153,153);font-family:tahoma,sans-serif">, en cualquier caso adjuntando una copia de su D.N.I. o documento equivalente. Asimismo, podrá formular reclamaciones ante la Agencia Española de Protección de Datos. </span></font><span style="color:rgb(153,153,153);font-family:tahoma,sans-serif;font-size:x-small">Para más información puede consultar nuestra </span><a href="https://www.firmaprofesional.com/esp/aviso-legal" style="color:rgb(17,85,204);font-family:tahoma,sans-serif;font-size:x-small" target="_blank">política de privacidad</a><span style="color:rgb(153,153,153);font-family:tahoma,sans-serif;font-size:x-small">.<br></span></i></p></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr"><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div class="gmail-m_7531708607923306254WordSection1"><div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">Servercert-wg <<a href="mailto:servercert-wg-bounces@cabforum.org" target="_blank">servercert-wg-bounces@cabforum.org</a>> on behalf of Ryan Sleevi via Servercert-wg <<a href="mailto:servercert-wg@cabforum.org" target="_blank">servercert-wg@cabforum.org</a>><br>
<b>Reply-To: </b>Ryan Sleevi <<a href="mailto:sleevi@google.com" target="_blank">sleevi@google.com</a>>, CA/B Forum Server Certificate WG Public Discussion List <<a href="mailto:servercert-wg@cabforum.org" target="_blank">servercert-wg@cabforum.org</a>><br>
<b>Date: </b>Thursday, July 9, 2020 at 1:01 PM<br>
<b>To: </b>CA/B Forum Server Certificate WG Public Discussion List <<a href="mailto:servercert-wg@cabforum.org" target="_blank">servercert-wg@cabforum.org</a>><br>
<b>Subject: </b>[EXTERNAL][Servercert-wg] VOTING BEGINS: Ballot SC31v3: Browser Alignment<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><strong><span style="font-family:Calibri,sans-serif;color:red">WARNING:</span></strong> This email originated outside of Entrust Datacard.<br>
<strong><span style="font-family:Calibri,sans-serif;color:red">DO NOT CLICK</span></strong> links or attachments unless you trust the sender and know the content is safe.<u></u><u></u></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="0" width="100%" align="center">
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:black">This begins the voting period for Ballot <span class="gmail-m_7531708607923306254gmail-il">SC31v3</span>: Browser Alignment<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="color:black">Purpose of Ballot:</span></b><span style="color:black"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">As a regular part of Root Program maintenance, and reflecting the independent nature of each Root Programs' needs and requirements, Root Programs have introduced a number of requirements above and beyond those
captured in the Baseline Requirements. For Root Programs, this approach results in a lack of certainty, as the requirements are not independently audited and assessed, unless otherwise provided for. For CAs, this introduces confusion when applying to have
the same CA certificate trusted by multiple Root Programs, as the effective requirements that the CA and certificates need to comply with are the union of the most-restrictive policies.<br>
<br>
The following ballot attempts to resolve this uncertainty for Root Programs, and ambiguity for CAs, by incorporating Root Program-specific requirements that are either effective or will, in the future, be effective.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><u></u> <u></u></span></p>
</div>
<p class="MsoNormal"><span style="color:black">This was originally drafted in </span><a href="https://github.com/sleevi/cabforum-docs/pull/10" target="_blank">https://github.com/sleevi/cabforum-docs/pull/10</a><span style="color:black"> , and as a pull request
is available at </span><a href="https://github.com/cabforum/documents/pull/195" target="_blank">https://github.com/cabforum/documents/pull/195</a><span style="color:black"><br>
<br>
The full description, and motivation, of each change, along with the effective dates, are available at the above pull request.<br>
<br>
The following motion has been proposed by Ryan Sleevi of Google and endorsed by Clint Wilson of Apple and Mike Reilly of Microsoft.</span><u></u><u></u></p>
<div>
<p class="MsoNormal"><span style="color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">The changes between SC31v1 and SC31v2 can be viewed at <a href="https://github.com/cabforum/documents/compare/90a7dfe95d32ae8c76a4fa55c7b038d4928872c6...1bb3be897213b21d15b837befa885b0ba34bfd3d" target="_blank">https://github.com/cabforum/documents/compare/90a7dfe95d32ae8c76a4fa55c7b038d4928872c6...1bb3be897213b21d15b837befa885b0ba34bfd3d</a> .
This corrects "Not applicable" to "No stipulation", updates the formatting/markup for Pandoc and provides additional example text to the effective date table for the Chair or Vice-Chair.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">The changes between SC31v2 and <span class="gmail-m_7531708607923306254gmail-il">SC31v3</span> can be viewed at<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt"><span style="color:black"><a href="https://github.com/cabforum/documents/compare/1bb3be897213b21d15b837befa885b0ba34bfd3d...a9a7814da2328c3d3d54d8355eff6fe398354af8" target="_blank">https://github.com/cabforum/documents/compare/1bb3be897213b21d15b837befa885b0ba34bfd3d...a9a7814da2328c3d3d54d8355eff6fe398354af8</a> .
This addresses an issue with certificate suspension for pre-existing, non-TLS certificates from TLS-capable subordinate CAs, and attempts to clarify the expectations around the use of CRL reason codes by requiring they be documented in the CA's CP/CPS. This
also shuffles a requirement already present in the BRs and the RFCs, regarding Delegated Responders being conflated with TLS-capable CAs, into the "Cleanup and Clarification" ballot.<br>
<br>
<b>--- MOTION BEGINS ---<br>
</b><br>
This ballot modifies "Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates" ("Baseline Requirements") as follows, based on Version 1.7.0<br>
<br>
MODIFY the Baseline Requirements as defined in the following redline:<br>
<a href="https://github.com/cabforum/documents/compare/d5067bbbfb46906c65e476ef3d55dd3b2c505a09...a9a7814da2328c3d3d54d8355eff6fe398354af8" target="_blank">https://github.com/cabforum/documents/compare/d5067bbbfb46906c65e476ef3d55dd3b2c505a09...a9a7814da2328c3d3d54d8355eff6fe398354af8</a><br>
<br>
This ballot modifies the “Guidelines for the Issuance and Management of Extended Validation Certificates” (“EV Guidelines”) as follows, based on version 1.7.2:<br>
<br>
MODIFY the EV Guidelines as defined in the following redline:<br>
<a href="https://github.com/cabforum/documents/compare/d5067bbbfb46906c65e476ef3d55dd3b2c505a09...a9a7814da2328c3d3d54d8355eff6fe398354af8" target="_blank">https://github.com/cabforum/documents/compare/d5067bbbfb46906c65e476ef3d55dd3b2c505a09...a9a7814da2328c3d3d54d8355eff6fe398354af8</a><br>
<br>
The Chair or Vice-Chair is permitted to update the Relevant Dates of the Baseline Requirements and the EV Guidelines to reflect these changes.<br>
<br>
<b>--- MOTION ENDS ---<br>
</b><br>
This ballot proposes two Final Maintenance Guidelines.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">The procedure for approval of this ballot is as follows:<br>
<br>
Discussion (7+ days)<br>
Start Time: 2-July 2020 00:00 UTC<br>
End Time: after 9-July 2020 00:00 UTC<br>
<br>
Vote for approval (7 days)<br>
Start Time: 9-July 2020 17:00 UTC<br>
End Time: 16-July 2020 17:00 UTC<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
_______________________________________________<br>
Servercert-wg mailing list<br>
<a href="mailto:Servercert-wg@cabforum.org" target="_blank">Servercert-wg@cabforum.org</a><br>
<a href="https://lists.cabforum.org/mailman/listinfo/servercert-wg" rel="noreferrer" target="_blank">https://lists.cabforum.org/mailman/listinfo/servercert-wg</a><br>
</blockquote></div></div>