<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Certum votes YES on ballot SC51.
</p>
<div class="moz-cite-prefix">On 18/02/2022 23:01, Clint Wilson via
Servercert-wg wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0100017f0eda86e0-c9bfb31f-d970-48f5-a5e4-f13513d13281-000000@email.amazonses.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<span class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0,
0); font-family: Menlo-Regular; font-size: 11px;">This email
begins the Voting period for Ballot SC51: </span><font class=""
face="Menlo-Regular" color="#000000"><span class=""
style="font-size: 11px;">Reduce and Clarify Audit Log and
Records Archival Retention Requirements</span></font><br
class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">
<br class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0,
0); font-family: Menlo-Regular; font-size: 11px;">
<font class="" face="Menlo-Regular" color="#000000"><span class=""
style="font-size: 11px;">BALLOT SC51: Reduce and Clarify Audit
Log and Records Archival Retention Requirements</span></font><br
class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">
<br class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0,
0); font-family: Menlo-Regular; font-size: 11px;">
<span class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0,
0); font-family: Menlo-Regular; font-size: 11px;">PURPOSE OF
BALLOT</span><br class="" style="caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size:
11px;">
<font class="" face="Menlo-Regular" color="#000000"><span class=""
style="font-size: 11px;"><br class="">
The purpose of this ballot is to consolidate and clarify
aspects of audit log and records archival retention
expectations and time-periods within 5.5.2.</span></font>
<div class=""><font class="" style="caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0);" face="Menlo-Regular" color="#000000"><span
class="" style="font-size: 11px;"><br class="">
Foremost, this ballot reduces retention periods for records
archival to 2 years.<br class="">
Further, currently audit log events as outlined in section
5.4.1, and then referenced in 5.4.3 lead to confusion around
the log retention that is defined and exclusive to each
section, and how that retention feeds into records archival
requirements. To further clarify the objectives of that
interaction, an explicit requirement has been introduced in
5.5.1 stating that CAs must archive lifecycle event records.<br
class="">
<br class="">
As minor adjustments to related requirements, this ballot
also clarifies what is expected by the term “OCSP Entries”
as a logged lifecycle event; as OCSP Entry is an undefined
term, this was replaced with OCSP Response such that it
should be clear that a CA will be logging the event of
signing an OCSP Response (including the elements stipulated
in 5.4.1). Similarly, some certificate lifecycle events
expected to be retained are currently separated into 5.5.2;
these have been incorporated into 5.4.1 instead. This ballot
also explicitly calls out the need for delegated third
parties to abide by the established retention periods for
audit logging and records archival procedures.</span></font>
<div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0,
0);"><font class="" face="Menlo-Regular" color="#000000"><span
class="" style="font-size: 11px;">This ballot also
formalizes incorporation of terms defined in the NCSSRs as
also applying to the BRs.</span></font></div>
<div class="">
<div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0,
0, 0);"><font class="" face="Menlo-Regular" color="#000000"><span
class="" style="font-size: 11px;"><br class="">
</span></font></div>
<div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0,
0, 0);"><font class="" face="Menlo-Regular" color="#000000"><span
class="" style="font-size: 11px;">MOTION</span></font></div>
<div class=""><br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="caret-color: rgb(0, 0, 0); color:
rgb(0, 0, 0); font-family: Menlo-Regular; font-size:
11px;">The following motion has been proposed by Clint
Wilson of Apple and endorsed by Trevoli Ponds-White of
Amazon and Dustin Hollenback of Microsoft.</span><br
class="" style="font-family: Menlo-Regular; font-size:
11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="caret-color: rgb(0, 0, 0); color:
rgb(0, 0, 0); font-family: Menlo-Regular; font-size:
11px;">-----Motion Begins-----</span><br class=""
style="font-family: Menlo-Regular; font-size: 11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="caret-color: rgb(0, 0, 0); color:
rgb(0, 0, 0); font-family: Menlo-Regular; font-size:
11px;">This ballot modifies the “Baseline Requirements for
the Issuance and Management of Publicly-Trusted
Certificates” as defined in the following redline, based
on Version 1.8.1:</span></div>
<div class=""><font class="" color="#000000"><span
style="caret-color: rgb(0, 0, 0);" class=""><br class=""
style="font-family: Menlo-Regular; font-size: 11px;">
</span></font><font class="" face="Menlo-Regular"
color="#000000"><span style="caret-color: rgb(0, 0, 0);
font-size: 11px;" class=""><a
href="https://github.com/cabforum/servercert/compare/65e80e07855ecc1d2264c040ecc7d398f997d2c5...2281a6c78692c3444db9a162df4ff217014b9f1f"
class="moz-txt-link-freetext" moz-do-not-send="true">https://github.com/cabforum/servercert/compare/65e80e07855ecc1d2264c040ecc7d398f997d2c5...2281a6c78692c3444db9a162df4ff217014b9f1f</a></span></font></div>
<div class=""><br class="">
</div>
<div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0,
0, 0);"><span class="" style="font-family: Menlo-Regular;
font-size: 11px;">-----Motion Ends-----</span><br class=""
style="font-family: Menlo-Regular; font-size: 11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">This ballot proposes a Final Maintenance Guideline.
The procedure for approval of this ballot is as follows:</span><br
class="" style="font-family: Menlo-Regular; font-size:
11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">Discussion (7+ days)</span><br class=""
style="font-family: Menlo-Regular; font-size: 11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">Start Time: February 11 2022 21:00 UTC</span><br
class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">End Time: February 18 2022 21:00 UTC</span><br
class="" style="font-family: Menlo-Regular; font-size:
11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">Vote for approval (7 days)</span><br class=""
style="font-family: Menlo-Regular; font-size: 11px;">
<br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">Start Time: February 18 2022 22:00 UTC</span><br
class="" style="font-family: Menlo-Regular; font-size:
11px;">
<span class="" style="font-family: Menlo-Regular; font-size:
11px;">End Time: February 25 2022 22:00 UTC</span></div>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Servercert-wg mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Servercert-wg@cabforum.org">Servercert-wg@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/servercert-wg">https://lists.cabforum.org/mailman/listinfo/servercert-wg</a>
</pre>
</blockquote>
</body>
</html>