
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=big5"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--

/* Font Definitions */

@font-face

        {font-family:新細明體;

        panose-1:2 2 5 0 0 0 0 0 0 0;}

@font-face

        {font-family:"MS Gothic";

        panose-1:2 11 6 9 7 2 5 8 2 4;}

@font-face

        {font-family:細明體;

        panose-1:2 2 5 9 0 0 0 0 0 0;}

@font-face

        {font-family:"Cambria Math";

        panose-1:2 4 5 3 5 4 6 3 2 4;}

@font-face

        {font-family:Calibri;

        panose-1:2 15 5 2 2 2 4 3 2 4;}

@font-face

        {font-family:"MS PGothic";

        panose-1:2 11 6 0 7 2 5 8 2 4;}

@font-face

        {font-family:"微\8F6F 雅黑";

        panose-1:0 0 0 0 0 0 0 0 0 0;}

@font-face

        {font-family:Tahoma;

        panose-1:2 11 6 4 3 5 4 4 2 4;}

@font-face

        {font-family:Menlo-Regular;

        panose-1:0 0 0 0 0 0 0 0 0 0;}

@font-face

        {font-family:"\@MS Gothic";

        panose-1:2 11 6 9 7 2 5 8 2 4;}

@font-face

        {font-family:"\@MS PGothic";}

@font-face

        {font-family:"\@細明體";

        panose-1:2 1 6 9 0 1 1 1 1 1;}

@font-face

        {font-family:"\@新細明體";

        panose-1:2 1 6 1 0 1 1 1 1 1;}

@font-face

        {font-family:"\@微\8F6F 雅黑";

        panose-1:0 0 0 0 0 0 0 0 0 0;}

/* Style Definitions */

p.MsoNormal, li.MsoNormal, div.MsoNormal

        {margin:0cm;

        margin-bottom:.0001pt;

        font-size:12.0pt;

        font-family:"MS PGothic",sans-serif;

        mso-fareast-language:JA;}

a:link, span.MsoHyperlink

        {mso-style-priority:99;

        color:blue;

        text-decoration:underline;}

a:visited, span.MsoHyperlinkFollowed

        {mso-style-priority:99;

        color:purple;

        text-decoration:underline;}

p

        {mso-style-priority:99;

        mso-margin-top-alt:auto;

        margin-right:0cm;

        mso-margin-bottom-alt:auto;

        margin-left:0cm;

        font-size:12.0pt;

        font-family:"MS PGothic",sans-serif;

        mso-fareast-language:JA;}

pre

        {mso-style-priority:99;

        mso-style-link:"HTML 預設格式 字元";

        margin:0cm;

        margin-bottom:.0001pt;

        font-size:12.0pt;

        font-family:"MS Gothic";

        mso-fareast-language:JA;}

span.HTML

        {mso-style-name:"HTML 預設格式 字元";

        mso-style-priority:99;

        mso-style-link:"HTML 預設格式";

        font-family:"Courier New";

        mso-fareast-language:JA;}

p.msonormal0, li.msonormal0, div.msonormal0

        {mso-style-name:msonormal;

        mso-style-priority:99;

        mso-margin-top-alt:auto;

        margin-right:0cm;

        mso-margin-bottom-alt:auto;

        margin-left:0cm;

        font-size:12.0pt;

        font-family:"MS PGothic",sans-serif;

        mso-fareast-language:JA;}

span.EmailStyle21

        {mso-style-type:personal-reply;

        font-family:"Calibri",sans-serif;

        color:#1F497D;}

.MsoChpDefault

        {mso-style-type:export-only;

        font-size:10.0pt;}

@page WordSection1

        {size:612.0pt 792.0pt;

        margin:72.0pt 90.0pt 72.0pt 90.0pt;}

div.WordSection1

        {page:WordSection1;}

--></style><!--[if gte mso 9]><xml>

<o:shapedefaults v:ext="edit" spidmax="1026" />

</xml><![endif]--><!--[if gte mso 9]><xml>

<o:shapelayout v:ext="edit">

<o:idmap v:ext="edit" data="1" />

</o:shapelayout></xml><![endif]--></head><body lang=ZH-TW link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>Chunghwa Telecom</span><span lang=EN-US style='font-size:10.5pt;color:#1F497D;background:white;mso-fareast-language:ZH-TW'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>votes</span><span lang=EN-US style='font-size:10.5pt;color:#1F497D;background:white;mso-fareast-language:ZH-TW'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>YES</span><span lang=EN-US style='font-size:10.5pt;color:#1F497D;background:white;mso-fareast-language:ZH-TW'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>on</span><span lang=EN-US style='font-size:10.5pt;color:#1F497D;background:white;mso-fareast-language:ZH-TW'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>Ballot</span><span lang=EN-US style='font-size:10.5pt;color:#1F497D;background:white;mso-fareast-language:ZH-TW'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>SC51.<o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='text-indent:10.5pt'><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>Thank you.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:ZH-TW'>       </span><span lang=EN-US style='font-size:10.5pt;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>  </span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:#1F497D;background:white;mso-fareast-language:ZH-TW'>Li-Chun Chen</span><span lang=EN-US style='font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:ZH-TW'><o:p></o:p></span></p></div><blockquote style='margin-left:6.0pt;margin-top:5.0pt;margin-bottom:5.0pt'><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>From:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> <a href="mailto:servercert-wg@cabforum.org">Clint Wilson via Servercert-wg</a><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>Date:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> 2022-02-19 06:01<o:p></o:p></span></p></div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>To:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> <a href="mailto:servercert-wg@cabforum.org">ServerCert CA/BF</a><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>Subject:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> [Servercert-wg] Voting period for Ballot SC51: Reduce and Clarify Audit Log and Records Archival Retention Requirements<o:p></o:p></span></p></div></div></div><div><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'>This email begins the Voting period for Ballot SC51: Reduce and Clarify Audit Log and Records Archival Retention Requirements<br><br>BALLOT SC51: Reduce and Clarify Audit Log and Records Archival Retention Requirements<br><br>PURPOSE OF BALLOT<br><br>The purpose of this ballot is to consolidate and clarify aspects of audit log and records archival retention expectations and time-periods within 5.5.2.</span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'><br>Foremost, this ballot reduces retention periods for records archival to 2 years.<br>Further, currently audit log events as outlined in section 5.4.1, and then referenced in 5.4.3 lead to confusion around the log retention that is defined and exclusive to each section, and how that retention feeds into records archival requirements. To further clarify the objectives of that interaction, an explicit requirement has been introduced in 5.5.1 stating that CAs must archive lifecycle event records.<br><br>As minor adjustments to related requirements, this ballot also clarifies what is expected by the term </span><span lang=JA style='font-size:8.5pt;font-family:"微软 雅黑",serif;color:black'>“</span><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'>OCSP Entries</span><span lang=JA style='font-size:8.5pt;font-family:"微软 雅黑",serif;color:black'>”</span><span lang=JA style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'> </span><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'>as a logged lifecycle event; as OCSP Entry is an undefined term, this was replaced with OCSP Response such that it should be clear that a CA will be logging the event of signing an OCSP Response (including the elements stipulated in 5.4.1). Similarly, some certificate lifecycle events expected to be retained are currently separated into 5.5.2; these have been incorporated into 5.4.1 instead. This ballot also explicitly calls out the need for delegated third parties to abide by the established retention periods for audit logging and records archival procedures.</span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'>This ballot also formalizes incorporation of terms defined in the NCSSRs as also applying to the BRs.</span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p></div><div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'>MOTION</span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'><br>The following motion has been proposed by Clint Wilson of Apple and endorsed by Trevoli Ponds-White of Amazon and Dustin Hollenback of Microsoft.<br><br>-----Motion Begins-----<br><br>This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” as defined in the following redline, based on Version 1.8.1:</span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'><br><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fcabforum%2Fservercert%2Fcompare%2F65e80e07855ecc1d2264c040ecc7d398f997d2c5...2281a6c78692c3444db9a162df4ff217014b9f1f&data=04%7C01%7Crealsky%40cht.com.tw%7Ccb83f76d863d43d33dca08d9f844f5d4%7C54eb9440cf0345fe835e61bd4ce515c8%7C0%7C0%7C637813797995301970%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=njTjDZudwdLcqVnMhaN%2FT7yUMo%2BpbPGWMKsVx67Sgwc%3D&reserved=0">https://github.com/cabforum/servercert/compare/65e80e07855ecc1d2264c040ecc7d398f997d2c5...2281a6c78692c3444db9a162df4ff217014b9f1f</a></span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"Menlo-Regular",serif;color:black'>-----Motion Ends-----<br><br>This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:<br><br>Discussion (7+ days)<br><br>Start Time: February 11 2022 21:00 UTC<br>End Time: February 18 2022 21:00 UTC<br><br>Vote for approval (7 days)<br><br>Start Time: February 18 2022 22:00 UTC<br>End Time: February 25 2022 22:00 UTC</span><span lang=EN-US style='font-size:10.5pt;font-family:"微软 雅黑",serif;color:black'><o:p></o:p></span></p></div></div></div></div></div></blockquote><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='background:white;padding:.75pt .75pt .75pt .75pt'></td></tr></table><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></body></html>