<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.gmail-il
{mso-style-name:gmail-il;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:553736110;
mso-list-template-ids:-369833090;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:1503279866;
mso-list-template-ids:1964929184;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:1791318739;
mso-list-template-ids:787634688;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">SecureTrust votes Yes on SC41v2.<br>
We did find a slight change of reference on BR Section 4.9.6 from “reasons stated in Section 4.9.1” to “reasons stated in Section 4.9”, but since the reasons are all contained within Section 4.9.1, we don’t consider this a fundamental change.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">Andrea Holland<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org>
<b>On Behalf Of </b>Ryan Sleevi via Servercert-wg<br>
<b>Sent:</b> Wednesday, February 17, 2021 5:29 PM<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org><br>
<b>Subject:</b> [Servercert-wg] VOTING BEGINS: Ballot SC41v2: Reformat the BRs, EVGs, and NCSSRs<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="color:black">Hearing no objections or concerns during the discussion period for Ballot <span class="gmail-il">SC41v2</span>: Reformat the BRs, EVGs, and NCSSRs , the purpose of this mail is to signal the start of the VOTING
PERIOD.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Bylaws Note: Although this Ballot modifies how the documents internally express the Guideline version number, it does not explicitly change the value of the Guideline version number in a manner that would constitute
an "update" pursuant to CA/Browser Forum Bylaws 2.3, Section 2.4 (8). As such, the Chair or Vice-Chair are permitted to make changes permitted by that Section as necessary.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black">Purpose of Ballot:<br>
<br>
This ballot attempts to align the Baseline Requirements (BRs), EV Guidelines (EVGs), and the Network and Certificate System Security Requirements (NCSSRs) to a common format, to allow for the automatic generation of final documents without requiring third-party
tooling being installed locally.<br>
<br>
It is a continuation of the work started in SC26 [1], and is within the work started originally by Ballots 154 and 155 [2]. If this ballot succeeds, the Server Certificate Working Group will use the version-controlled documents in GitHub as the authoritative
source of requirements, avoiding issues that resulted from exchanging various versions of Microsoft Office files via e-mail or the Wiki.<br>
<br>
The following changes are made, and are explicitly called out, beyond changes to font/styling</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:47.25pt;text-indent:-.25in;mso-list:l1 level1 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol;color:black"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Baseline Requirements<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Formatting issues in Sections 3.2.2.4.18, 3.2.2.4.19, 4.10.1, 6.1.6, Appendix B are resolved (see [3] [4] [5])<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Section 9.6.1 referenced a non-existent Section 11.2, which was a bug introduced in BRs v1.3.0. This is fixed to the correct section, which is 7.1.4.2.2. [6]<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Section 3.2.2.4.7 referenced Section 3.3.1, rather than the intended Section 4.2.1 [7]<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">The BRs consistently incorrectly refer to Section 8.1 for audit schemes, when the correct reference in Section 8.4 [8]<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:47.25pt;text-indent:-.25in;mso-list:l1 level1 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol;color:black"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Extended Validation Guidelines<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">The EVGs are aligned to common language when referencing other sections, removing variations like “this Section X”, “the Section X of these Guidelines”, “Section X herein”, etc. Ambiguity is avoided by
ensuring these references will also be internal document links that are structurally enforced.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:47.25pt;text-indent:-.25in;mso-list:l1 level1 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol;color:black"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Network and Certificate System Security<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">The structure is aligned to the BRs and EVGs, by listing Scope and Applicability followed by Document History and Definitions.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:83.25pt;text-indent:-.25in;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="font-size:10.0pt;font-family:"Courier New";color:black"><span style="mso-list:Ignore">o<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Section 2, Items (g), (k), and (o) and Section 4, Item (c) and (f), have the sub-items renumbered to Arabic numerals (1, 2, 3, 4) instead of Roman numerals (i, ii, iii, iv), for consistency and to avoid
ambiguity with I/(i)/i.<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:black">This ballot attaches derived versions of these documents in PDF and Microsoft Office, as produced by these changes. However, these documents are INFORMATIVE only, as per the Ballot text, and are provided to assist
Members in review. For the avoidance of doubt, the attached documents do not constitute Ballot Versions, as defined within the CA/Browser Forum Bylaws, Section 2.4(1).<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">If there are any inconsistencies, the balloted text redline shall decide the definitive version. However, Members are encouraged to raise any such presentation issues, to ensure they can be reasonably addressed
as part of this Ballot.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black">The following motion has been proposed by Ryan Sleevi of Google and endorsed by Ben Wilson of Mozilla and Dimitris Zacharopoulos of HARICA.</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Version 2 of this Ballot introduces language to address potential conflicts with Ballot SC39v3, due to modifying the same section of the NCSSRs, as well as addresses one small Markdown lint pointed out by Aaron
Gable of ISRG/Let's Encrypt with respect to fenced code blocks.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">The comparison between v1 and <span class="gmail-il">v2</span> of this ballot is available at [9]<br>
<br>
[1] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKge0pPmu8Dw&s=5&u=https%3a%2f%2fcabforum%2eorg%2f2020%2f03%2f30%2fballot-sc26v2-pandoc-friendly-markdown-formatting-changes%2f" target="_blank">https://cabforum.org/2020/03/30/ballot-sc26v2-pandoc-friendly-markdown-formatting-changes/</a><span style="color:black"><br>
[2] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgewsam6xWg&s=5&u=https%3a%2f%2fcabforum%2eorg%2f2015%2f11%2f18%2fballots-154-and-155-convert-to-rfc-3647-framework-and-github%2f" target="_blank">https://cabforum.org/2015/11/18/ballots-154-and-155-convert-to-rfc-3647-framework-and-github/</a><span style="color:black"><br>
[3] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgbgpPmy7CA&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fissues%2f230" target="_blank">https://github.com/cabforum/servercert/issues/230</a><span style="color:black"><br>
[4] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgekubDu4CQ&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fissues%2f231" target="_blank">https://github.com/cabforum/servercert/issues/231</a><span style="color:black"><br>
[5] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgborbWu-DA&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fissues%2f233" target="_blank">https://github.com/cabforum/servercert/issues/233</a><span style="color:black"><br>
[6] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb8jbji_CQ&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fissues%2f237" target="_blank">https://github.com/cabforum/servercert/issues/237</a><span style="color:black"><br>
[7] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKge56P2mwBg&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fissues%2f236" target="_blank">https://github.com/cabforum/servercert/issues/236</a><span style="color:black"><br>
[8] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgex4PT3sBg&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fissues%2f216" target="_blank">https://github.com/cabforum/servercert/issues/216</a><span style="color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">[9] </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgbcuOW_sXA&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fcompare%2fa8a6605a1d37ec9120ee1cc30b725bafa4dd5651%2e%2e8f0a3b5038ff2911c50741ded594d403ec868803" target="_blank">https://github.com/cabforum/servercert/compare/a8a6605a1d37ec9120ee1cc30b725bafa4dd5651..8f0a3b5038ff2911c50741ded594d403ec868803</a><span style="color:black"><br>
<br>
– MOTION BEGINS –<br>
<br>
This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” (“Baseline Requirements”), based on Version 1.7.3:<br>
<br>
MODIFY the Baseline Requirements as defined in the following redline to </span><a href="http://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKge4oaG7qBw&s=5&u=http%3a%2f%2fBR%2emd%3a">BR.md:</a><span style="color:black"><br>
<br>
</span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb96ajjsBg&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2f2b7720f7821764f0ea9d0d583ec5c61896a3f4cd%2e%2e8f0a3b5038ff2911c50741ded594d403ec868803" target="_blank">https://github.com/cabforum/documents/compare/2b7720f7821764f0ea9d0d583ec5c61896a3f4cd..8f0a3b5038ff2911c50741ded594d403ec868803</a><span style="color:black"><br>
<br>
This ballot modifies the “Guidelines for the Issuance and Management of Extended Validation Certificates” (“EV Guidelines”) as follows, based on Version 1.7.4:<br>
<br>
MODIFY the EV Guidelines as defined in the following redline to </span><a href="http://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgep5ZD-6Xg&s=5&u=http%3a%2f%2fEVG%2emd%3a">EVG.md:</a><span style="color:black"><br>
<br>
</span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb96ajjsBg&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2f2b7720f7821764f0ea9d0d583ec5c61896a3f4cd%2e%2e8f0a3b5038ff2911c50741ded594d403ec868803" target="_blank">https://github.com/cabforum/documents/compare/2b7720f7821764f0ea9d0d583ec5c61896a3f4cd..8f0a3b5038ff2911c50741ded594d403ec868803</a><span style="color:black"><br>
<br>
This ballot modifies the “Network and Certificate System Security Requirements” (“Network Security Controls”) as follows, based on Version 1.5<br>
<br>
IF Ballot SC39v3 FAILS to be adopted by the Server Certificate Chartered Working Group:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:47.25pt;text-indent:-.25in;mso-list:l0 level1 lfo4">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol;color:black"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">MODIFY the Network Security Controls as defined in the following redline to
</span><a href="http://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb16OWvuCQ&s=5&u=http%3a%2f%2fNSR%2emd%3a">NSR.md:</a><span style="color:black"><br>
</span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgeoqZD_tXQ&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2f2b7720f7821764f0ea9d0d583ec5c61896a3f4cd%2e%2ea8a6605a1d37ec9120ee1cc30b725bafa4dd5651" target="_blank">https://github.com/cabforum/documents/compare/2b7720f7821764f0ea9d0d583ec5c61896a3f4cd..a8a6605a1d37ec9120ee1cc30b725bafa4dd5651</a><span style="color:black"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:black">IF Ballot SC39v3 SUCCEEDS and is adopted by the Server Certificate Chartered Working Group<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:47.25pt;text-indent:-.25in;mso-list:l2 level1 lfo6">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol;color:black"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">MODIFY the Network Security Controls as defined in the following redline to
</span><a href="http://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb16OWvuCQ&s=5&u=http%3a%2f%2fNSR%2emd%3a">NSR.md:</a><span style="color:black"><br>
</span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb96ajjsBg&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2f2b7720f7821764f0ea9d0d583ec5c61896a3f4cd%2e%2e8f0a3b5038ff2911c50741ded594d403ec868803" target="_blank">https://github.com/cabforum/documents/compare/2b7720f7821764f0ea9d0d583ec5c61896a3f4cd..8f0a3b5038ff2911c50741ded594d403ec868803</a><span style="color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">On the successful adoption of this Ballot, the Forum shall recognize the CA/Browser Forum Server Certificate Chartered Working Group Git repository, as the authoritative and canonical source for the Baseline Requirements,
EV Guidelines, and Network Security Controls. Alternative presentation formats may be used and provided, such as PDF/A, Office Open XML, or HTML, but in the event of any inconsistency in presentation, the documents as committed to the official Git repository
shall be authoritative.<br>
<br>
At the time of this ballot, the Git repository may be browsed at </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb16bjzpXQ&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert" target="_blank">https://github.com/cabforum/servercert</a><span style="color:black"> and
cloned via </span><a href="https://scanmail.trustwave.com/?c=4062&d=x5it4GP2_A8SxqvdsgR5Xkk5OoB0m9cKgb0iPmDqCA&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2egit" target="_blank">https://github.com/cabforum/servercert.git</a><span style="color:black"><br>
<br>
– MOTION ENDS –<br>
<br>
This ballot proposes three Final Maintenance Guidelines.<br>
<br>
The procedure for approval of this ballot is as follows:<br>
<br>
Discussion (7+ days)<br>
<br>
Start Time: 2021-02-08 16:00:00 UTC<br>
End Time: 2021-02-17 22:30:00 UTC<br>
<br>
Vote for approval (7 days)<br>
<br>
Start Time: 2021-02-17 22:30:00 UTC<br>
End Time: 2021-02-24 22:30:00 UTC<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information
contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.
</body>
</html>