<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:-moz-fixed;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p>Visa votes YES to ballot SC39v3.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><i><span style="color:#1F497D">V.R.</span></i><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="color:#44546A"> </span></i><span style="color:#44546A"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#44546A">Adam Clark<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#44546A"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#44546A">________________________________________________________________________________________________________</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Adam Clark </span><span style="font-size:10.0pt;color:#FF9900">|Sr Director -</span><span style="font-size:10.0pt;color:#1F497D">Applied Cryptography </span><span style="font-size:10.0pt;color:#FF9900">|</span><span style="font-size:10.0pt;color:#1F497D">Cybersecurity
Security Architecture</span><span style="color:#FF9900">|</span><span style="color:navy"> </span><b><span style="font-size:9.0pt;color:#FFAB00">Visa Inc.</span></b><b><span style="font-size:9.0pt;color:#FF9900"> </span></b><span style="color:#70AD47"> </span><span style="color:#FF9900">| </span><span style="font-size:10.0pt;color:#1F497D">T.
571-439-7580</span><span style="font-size:10.0pt;color:navy"> </span><span style="font-size:10.0pt;color:#FF9900">|</span><span style="font-size:10.0pt;color:#1F497D"> C. 571-442-3271</span><b><span style="font-size:9.0pt;color:#FFAB00">│
</span></b><span style="font-size:9.0pt;color:#002060"><a href="mailto:Adam.Clark@Visa.com"><span style="color:#0563C1">Adam.Clark@Visa.com</span></a></span><span style="font-size:9.0pt;color:#0023A0"> </span><b><span style="font-size:9.0pt;color:#FFAB00">│</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:navy"> </span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:#205982"><img border="0" width="323" height="68" style="width:3.3645in;height:.7083in" id="Picture_x0020_1" src="cid:image001.png@01D6F968.D5D66180"></span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#1F497D"> </span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:6.0pt;color:gray">NOTICE</span></b><span style="font-size:6.0pt;color:gray">: </span><span style="font-size:6.0pt;color:#595959">The information contained in this transmission (including any attachments) is confidential
and may be privileged. It is intended only for the use of the individual or entity named above. If you are not the intended recipient, dissemination, distribution, or copy of this communication is strictly prohibited. If you have received this communication
in error, please erase all copies of this message and its attachments and notify me immediately.</span><span style="color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org>
<b>On Behalf Of </b>Neil Dunbar via Servercert-wg<br>
<b>Sent:</b> Tuesday, February 2, 2021 9:29 AM<br>
<b>To:</b> servercert-wg@cabforum.org<br>
<b>Subject:</b> Re: [Servercert-wg] VOTING BEGINS: Ballot SC39v3: Definition of Critical Vulnerability<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Resend: adding the ballot title to the mail thread.<o:p></o:p></p>
<div>
<p class="MsoNormal">On 02/02/2021 14:15, Neil Dunbar via Servercert-wg wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:-moz-fixed">Colleagues,
<br>
<br>
This begins the voting period for ballot SC39v3: Definition of Critical Vulnerability.<br>
<br>
The following motion has been proposed by Neil Dunbar of TrustCor and endorsed by Ben Wilson (Mozilla) and Corey Bonnell (DigiCert).
<br>
<br>
-- MOTION BEGINS -- <br>
<br>
This ballot modifies the “Network and Certificate System Security Requirements” based on Version 1.5.
<br>
<br>
Under the section “Definitions”: <br>
<br>
Remove the current definition: <br>
<br>
Critical Vulnerability: A system vulnerability that has a CVSS score of 7.0 or higher according to the NVD or an equivalent to such CVSS rating (see
<a href="http://nvd.nist.gov/home.cfm">http://nvd.nist.gov/home.cfm</a>), or as otherwise designated as a Critical Vulnerability by the CA or the CA/Browser Forum.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:-moz-fixed"><br>
Insert a new definition: <br>
<br>
Critical Vulnerability: A system vulnerability that has a CVSS v2.0 score of 7.0 or higher according to the NVD or an equivalent to such CVSS rating (see
<a href="https://nvd.nist.gov/vuln-metrics/cvss">https://nvd.nist.gov/vuln-metrics/cvss</a>), or as otherwise designated as a Critical Vulnerability by the CA or the CA/Browser Forum.
<br>
<br>
-- MOTION ENDS -- <br>
<br>
* WARNING *: USE AT YOUR OWN RISK. THE REDLINE BELOW IS NOT THE OFFICIAL VERSION OF THE CHANGES (CABF Bylaws, Section 2.4(a)):
<br>
<br>
A comparison of the changes can be found at: <br>
<br>
<a href="https://github.com/cabforum/servercert/compare/2b7720f...neildunbar:61fd381?diff=split">https://github.com/cabforum/servercert/compare/2b7720f...neildunbar:61fd381?diff=split</a>
<br>
<br>
This ballot proposes one Final Maintenance Guideline. <br>
<br>
The procedure for approval of this ballot is as follows: <br>
<br>
Vote for approval (7 days)<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:-moz-fixed"><br>
Start Time: 2020-02-02 1700 UTC <br>
End Time: 2020-02-09 1700 UTC<br>
<br>
Regards, <br>
<br>
Neil <o:p></o:p></span></p>
</div>
</blockquote>
</div>
</body>
</html>