<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Apple votes Yes to Ballot SC53.<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jan 17, 2022, at 7:00 AM, Corey Bonnell via Servercert-wg <<a href="mailto:servercert-wg@cabforum.org" class="">servercert-wg@cabforum.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><h1 style="margin: 12pt 0in 0in; line-height: 22.399999618530273px; break-after: avoid; font-size: 16pt; font-family: "Calibri Light", sans-serif; color: rgb(47, 84, 150); font-weight: normal;" class=""><a name="_Hlk92104730" class="">Purpose of Ballot<o:p class=""></o:p></a></h1><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">Weaknesses regarding the use of the SHA-1 hash algorithm for signatures have been known for several years. While there is currently a prohibition on the use of CA Private Keys to directly sign OCSP responses using SHA-1, Private Keys corresponding to OCSP delegated responders may still be used to sign OCSP responses using SHA-1. This ballot establishes a sunset date to prohibit delegated OCSP signing with the SHA-1 hash algorithm.<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class=""><o:p class=""> </o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">The following motion has been proposed by Corey Bonnell of DigiCert and endorsed by Ben Wilson of Mozilla and Bruce Morton of Entrust.<o:p class=""></o:p></span></div><h1 style="margin: 12pt 0in 0in; line-height: 22.399999618530273px; break-after: avoid; font-size: 16pt; font-family: "Calibri Light", sans-serif; color: rgb(47, 84, 150); font-weight: normal;" class=""><span class="">Motion Begins<o:p class=""></o:p></span></h1><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” (“Baseline Requirements”), based on Version 1.8.0:<br class="">MODIFY the Baseline Requirements as specified in the following Redline:<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class=""></span><a href="https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7...637c6959c35bbd93cc451f7b22dfb48ac4255b9f" style="color: rgb(5, 99, 193); text-decoration: underline;" class=""><span class="">https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7...637c6959c35bbd93cc451f7b22dfb48ac4255b9f</span><span class=""></span></a><span class=""><o:p class=""></o:p></span></div><h1 style="margin: 12pt 0in 0in; line-height: 22.399999618530273px; break-after: avoid; font-size: 16pt; font-family: "Calibri Light", sans-serif; color: rgb(47, 84, 150); font-weight: normal;" class=""><span class="">Motion Ends<o:p class=""></o:p></span></h1><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class=""><o:p class=""> </o:p></span></div><h2 style="margin: 2pt 0in 0in; line-height: 18.200000762939453px; break-after: avoid; font-size: 13pt; font-family: "Calibri Light", sans-serif; color: rgb(47, 84, 150); font-weight: normal;" class=""><span class="">Discussion (7+ days)<o:p class=""></o:p></span></h2><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">Start time: 2022-01-10 15:00:00 UTC<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">End time: 2022-01-17 15:00:00 UTC<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class=""><o:p class=""> </o:p></span></div><h2 style="margin: 2pt 0in 0in; line-height: 18.200000762939453px; break-after: avoid; font-size: 13pt; font-family: "Calibri Light", sans-serif; color: rgb(47, 84, 150); font-weight: normal;" class=""><span class="">Vote for approval (7 days)<o:p class=""></o:p></span></h2><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">Start time: 2022-01-17 15:00:00 UTC<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">End time:<span class="Apple-converted-space"> </span></span>2022-01-24 15:00:00 UTC<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thanks,<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Corey<o:p class=""></o:p></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Servercert-wg mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:Servercert-wg@cabforum.org" style="color: rgb(5, 99, 193); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Servercert-wg@cabforum.org</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://lists.cabforum.org/mailman/listinfo/servercert-wg" style="color: rgb(5, 99, 193); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://lists.cabforum.org/mailman/listinfo/servercert-wg</a></div></blockquote></div><br class=""></body></html>