<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>SSL.com votes YES on SC51.<br>
</p>
<div class="moz-cite-prefix">On 2/21/2022 1:47 PM, Clint Wilson via
Servercert-wg wrote:<br>
</div>
<blockquote type="cite" cite="mid:0100017f1dd2ef72-dd476cdc-778b-4bea-be04-2d77a8d0c927-000000@email.amazonses.com">
Apple votes Yes on Ballot SC51.<br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">On Feb 18, 2022, at 2:01 PM, Clint Wilson via
Servercert-wg <<a href="mailto:servercert-wg@cabforum.org" class="moz-txt-link-freetext" moz-do-not-send="true">servercert-wg@cabforum.org</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space;
line-break: after-white-space;" class=""><span class="" style="caret-color: rgb(0, 0, 0); font-family:
Menlo-Regular; font-size: 11px;">This email begins the
Voting period for Ballot SC51: </span><font class="" face="Menlo-Regular"><span class="" style="font-size:
11px;">Reduce and Clarify Audit Log and Records
Archival Retention Requirements</span></font><br class="" style="caret-color: rgb(0, 0, 0); font-family:
Menlo-Regular; font-size: 11px;">
<br class="" style="caret-color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">
<font class="" face="Menlo-Regular"><span class="" style="font-size: 11px;">BALLOT SC51: Reduce and
Clarify Audit Log and Records Archival Retention
Requirements</span></font><br class="" style="caret-color: rgb(0, 0, 0); font-family:
Menlo-Regular; font-size: 11px;">
<br class="" style="caret-color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">
<span class="" style="caret-color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">PURPOSE OF
BALLOT</span><br class="" style="caret-color: rgb(0, 0,
0); font-family: Menlo-Regular; font-size: 11px;">
<font class="" face="Menlo-Regular"><span class="" style="font-size: 11px;"><br class="">
The purpose of this ballot is to consolidate and
clarify aspects of audit log and records archival
retention expectations and time-periods within 5.5.2.</span></font>
<div class=""><font class="" style="caret-color: rgb(0, 0,
0);" face="Menlo-Regular"><span class="" style="font-size: 11px;"><br class="">
Foremost, this ballot reduces retention periods for
records archival to 2 years.<br class="">
Further, currently audit log events as outlined in
section 5.4.1, and then referenced in 5.4.3 lead to
confusion around the log retention that is defined
and exclusive to each section, and how that
retention feeds into records archival requirements.
To further clarify the objectives of that
interaction, an explicit requirement has been
introduced in 5.5.1 stating that CAs must archive
lifecycle event records.<br class="">
<br class="">
As minor adjustments to related requirements, this
ballot also clarifies what is expected by the term
“OCSP Entries” as a logged lifecycle event; as
OCSP Entry is an undefined term, this was replaced
with OCSP Response such that it should be clear that
a CA will be logging the event of signing an
OCSP Response (including the elements stipulated in
5.4.1). Similarly, some certificate lifecycle events
expected to be retained are currently separated into
5.5.2; these have been incorporated into
5.4.1 instead. This ballot also explicitly calls out
the need for delegated third parties to abide by the
established retention periods for audit logging and
records archival procedures.</span></font>
<div class="" style="caret-color: rgb(0, 0, 0);"><font class="" face="Menlo-Regular"><span class="" style="font-size: 11px;">This ballot also
formalizes incorporation of terms defined in the
NCSSRs as also applying to the BRs.</span></font></div>
<div class="">
<div class="" style="caret-color: rgb(0, 0, 0);"><font class="" face="Menlo-Regular"><span class="" style="font-size: 11px;"><br class="">
</span></font></div>
<div class="" style="caret-color: rgb(0, 0, 0);"><font class="" face="Menlo-Regular"><span class="" style="font-size: 11px;">MOTION</span></font></div>
<div class=""><br class="" style="font-family:
Menlo-Regular; font-size: 11px;">
<span class="" style="caret-color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">The
following motion has been proposed by Clint Wilson
of Apple and endorsed by Trevoli Ponds-White of
Amazon and Dustin Hollenback of Microsoft.</span><br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="caret-color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">-----Motion
Begins-----</span><br class="" style="font-family:
Menlo-Regular; font-size: 11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="caret-color: rgb(0, 0, 0);
font-family: Menlo-Regular; font-size: 11px;">This
ballot modifies the “Baseline Requirements for the
Issuance and Management of Publicly-Trusted
Certificates” as defined in the following redline,
based on Version 1.8.1:</span></div>
<div class=""><font class=""><span style="caret-color:
rgb(0, 0, 0);" class=""><br class="" style="font-family: Menlo-Regular; font-size:
11px;">
</span></font><font class="" face="Menlo-Regular"><span style="caret-color: rgb(0, 0, 0); font-size:
11px;" class=""><a href="https://github.com/cabforum/servercert/compare/65e80e07855ecc1d2264c040ecc7d398f997d2c5...2281a6c78692c3444db9a162df4ff217014b9f1f" class="moz-txt-link-freetext" moz-do-not-send="true">https://github.com/cabforum/servercert/compare/65e80e07855ecc1d2264c040ecc7d398f997d2c5...2281a6c78692c3444db9a162df4ff217014b9f1f</a></span></font></div>
<div class=""><br class="">
</div>
<div class="" style="caret-color: rgb(0, 0, 0);"><span class="" style="font-family: Menlo-Regular;
font-size: 11px;">-----Motion Ends-----</span><br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">This ballot proposes a Final
Maintenance Guideline. The procedure for approval
of this ballot is as follows:</span><br class="" style="font-family: Menlo-Regular; font-size:
11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">Discussion (7+ days)</span><br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">Start Time: February 11 2022
21:00 UTC</span><br class="" style="font-family:
Menlo-Regular; font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">End Time: February 18 2022 21:00
UTC</span><br class="" style="font-family:
Menlo-Regular; font-size: 11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">Vote for approval (7 days)</span><br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<br class="" style="font-family: Menlo-Regular;
font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">Start Time: February 18 2022
22:00 UTC</span><br class="" style="font-family:
Menlo-Regular; font-size: 11px;">
<span class="" style="font-family: Menlo-Regular;
font-size: 11px;">End Time: February 25 2022 22:00
UTC</span></div>
</div>
</div>
</div>
_______________________________________________<br class="">
Servercert-wg mailing list<br class="">
<a href="mailto:Servercert-wg@cabforum.org" class="moz-txt-link-freetext" moz-do-not-send="true">Servercert-wg@cabforum.org</a><br class="">
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/servercert-wg">https://lists.cabforum.org/mailman/listinfo/servercert-wg</a><br class="">
</div>
</blockquote>
</div>
<br class="">
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Servercert-wg mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Servercert-wg@cabforum.org">Servercert-wg@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/servercert-wg">https://lists.cabforum.org/mailman/listinfo/servercert-wg</a>
</pre>
</blockquote>
</body>
</html>