<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"ＭＳ Ｐゴシック";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:"\@ＭＳ Ｐゴシック";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0mm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"ＭＳ Ｐゴシック";}
h1
{mso-style-priority:9;
mso-style-link:"見出し 1 \(文字\)";
mso-margin-top-alt:auto;
margin-right:0mm;
mso-margin-bottom-alt:auto;
margin-left:0mm;
font-size:24.0pt;
font-family:"ＭＳ Ｐゴシック";}
h2
{mso-style-priority:9;
mso-style-link:"見出し 2 \(文字\)";
mso-margin-top-alt:auto;
margin-right:0mm;
mso-margin-bottom-alt:auto;
margin-left:0mm;
font-size:18.0pt;
font-family:"ＭＳ Ｐゴシック";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.1
{mso-style-name:"見出し 1 \(文字\)";
mso-style-priority:9;
mso-style-link:"見出し 1";
font-family:"Arial",sans-serif;}
span.2
{mso-style-name:"見出し 2 \(文字\)";
mso-style-priority:9;
mso-style-link:"見出し 2";
font-family:"Arial",sans-serif;}
span.19
{mso-style-type:personal-reply;
font-family:"Arial",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:99.25pt 30.0mm 30.0mm 30.0mm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026">
<v:textbox inset="5.85pt,.7pt,5.85pt,.7pt" />
</o:shapedefaults></xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="JA" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">SECOM Trust Systems votes "Yes" on Ballot SC-58.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Servercert-wg [mailto:servercert-wg-bounces@cabforum.org]
<b>On Behalf Of </b>Aaron Gable via Servercert-wg<br>
<b>Sent:</b> Tuesday, November 1, 2022 1:16 AM<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org><br>
<b>Subject:</b> [Servercert-wg] Voting period begins: SC-58: require distributionPoint in sharded CRLs<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<div>
<h1 style="mso-margin-top-alt:12.0pt;margin-right:0mm;margin-bottom:0mm;margin-left:0mm;margin-bottom:.0001pt;line-height:16.8pt">
<a name="m_-1814758701796615515_m_-35373179492168"><span lang="EN-US" style="font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#222222;font-weight:normal">Purpose of Ballot</span></a><span lang="EN-US" style="font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal"><o:p></o:p></span></h1>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">Recently, several conversations around the necessity of the distributionPoint field (and its containing Issuing Distribution Point extension) in sharded CRLs
have come to the conclusion that, although the distributionPoint field serves an important purpose in defending against substitution attacks, RFC 5280's language does not actually require its presence.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">This ballot augments the Baseline Requirements' CRL Profile to ensure that all sharded CRLs contain the distributionPoint field.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">The following motion has been proposed by Aaron Gable of ISRG / Let's Encrypt, and endorsed by Clint Wilson of Apple, Corey Bonnell of DigiCert, and Dmitris Zacharopoulos
of HARICA.<o:p></o:p></span></p>
<h1 style="mso-margin-top-alt:12.0pt;margin-right:0mm;margin-bottom:0mm;margin-left:0mm;margin-bottom:.0001pt;line-height:16.8pt;break-after:avoid">
<span lang="EN-US" style="font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal">Motion Begins<o:p></o:p></span></h1>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">This ballot modifies the
</span>“<span lang="EN-US">Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates</span>”<span lang="EN-US"> (</span>“<span lang="EN-US">Baseline Requirements</span>”<span lang="EN-US">), based on Version 1.8.4.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"><br>
MODIFY the Baseline Requirements as specified in the following Redline:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"><a href="https://github.com/cabforum/servercert/compare/bbca71465ed8a8a76383086039f52c750009286a..348756d64e863c19bcab404671abeeec985d6041" target="_blank">https://github.com/cabforum/servercert/compare/bbca71465ed8a8a76383086039f52c750009286a..348756d64e863c19bcab404671abeeec985d6041</a><o:p></o:p></span></p>
<h1 style="mso-margin-top-alt:12.0pt;margin-right:0mm;margin-bottom:0mm;margin-left:0mm;margin-bottom:.0001pt;line-height:16.8pt;break-after:avoid">
<span lang="EN-US" style="font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal">Motion Ends<o:p></o:p></span></h1>
<div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"><o:p> </o:p></span></p>
<h2 style="mso-margin-top-alt:2.0pt;margin-right:0mm;margin-bottom:0mm;margin-left:0mm;margin-bottom:.0001pt;line-height:13.65pt;break-after:avoid">
<span lang="EN-US" style="font-size:13.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal">Discussion (Completed)<o:p></o:p></span></h2>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">Start time: 2022-10-22 00:00:00 UTC<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">End time: Not before 2022-10-29 00:00:00 UTC<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"><o:p> </o:p></span></p>
<h2 style="mso-margin-top-alt:2.0pt;margin-right:0mm;margin-bottom:0mm;margin-left:0mm;margin-bottom:.0001pt;line-height:13.65pt;break-after:avoid">
<span lang="EN-US" style="font-size:13.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal">Vote for approval (7 days)<o:p></o:p></span></h2>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">Start time: 2022-10-31 16:00:00 UTC<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">End time: 2022-11-07 16:00:00 UTC<o:p></o:p></span></p>
</div>
</div>
</body>
</html>