<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=big5"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:·s²Ó©úÅé;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:²Ó©úÅé;
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@·s²Ó©úÅé";
panose-1:2 1 6 1 0 1 1 1 1 1;}
@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"\@MS PGothic";}
@font-face
{font-family:"\@²Ó©úÅé";
panose-1:2 1 6 9 0 1 1 1 1 1;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"·L\8F6F ¶®¶Â";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"\@·L\8F6F ¶®¶Â";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;}
h1
{mso-style-priority:9;
mso-style-link:"¼ÐÃD 1 ¦r¤¸";
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:24.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}
h2
{mso-style-priority:9;
mso-style-link:"¼ÐÃD 2 ¦r¤¸";
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:18.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;}
pre
{mso-style-priority:99;
mso-style-link:"HTML ¹w³]®æ¦¡ ¦r¤¸";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"MS Gothic";
mso-fareast-language:JA;}
span.1
{mso-style-name:"¼ÐÃD 1 ¦r¤¸";
mso-style-priority:9;
mso-style-link:"¼ÐÃD 1";
font-family:"Calibri Light",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}
span.2
{mso-style-name:"¼ÐÃD 2 ¦r¤¸";
mso-style-priority:9;
mso-style-link:"¼ÐÃD 2";
font-family:"Calibri Light",sans-serif;
mso-fareast-language:JA;
font-weight:bold;}
span.HTML
{mso-style-name:"HTML ¹w³]®æ¦¡ ¦r¤¸";
mso-style-priority:99;
mso-style-link:"HTML ¹w³]®æ¦¡";
font-family:"Courier New";
mso-fareast-language:JA;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-TW link=blue vlink=purple><div class=WordSection1><p class=MsoNormal style='text-indent:21.0pt'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Chunghwa Telecom</span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>votes</span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>YES</span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>on</span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>ballot</span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>SC-58.<br><br></span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'> Thanks.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:ZH-TW'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:ZH-TW'> </span><span lang=EN-US style='font-size:10.5pt;color:black'> </span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Li-Chun</span><span lang=EN-US style='font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:ZH-TW'><o:p></o:p></span></p><blockquote style='margin-left:6.0pt;margin-top:5.0pt;margin-bottom:5.0pt'><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>From:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> <a href="mailto:servercert-wg@cabforum.org">Aaron Gable via Servercert-wg</a><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>Date:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> 2022-11-01 00:15<o:p></o:p></span></p></div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>To:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> <a href="mailto:servercert-wg@cabforum.org">CA/B Forum Server Certificate WG Public Discussion List</a><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:#EFEFEF'><b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>Subject:</span></b><span lang=EN-US style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> [Servercert-wg] Voting period begins: SC-58: require distributionPoint in sharded CRLs<o:p></o:p></span></p></div></div></div><div><div><div><h1 style='mso-margin-top-alt:12.0pt;margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;line-height:16.8pt;break-after:avoid'><span lang=EN-US style='font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#222222;font-weight:normal'>Purpose of Ballot</span><a name="m_-1814758701796615515_m_-35373179492168"></a><span lang=EN-US style='font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal'><o:p></o:p></span></h1><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Recently, several conversations around the necessity of the distributionPoint field (and its containing Issuing Distribution Point extension) in sharded CRLs have come to the conclusion that, although the distributionPoint field serves an important purpose in defending against substitution attacks, RFC 5280's language does not actually require its presence.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>This ballot augments the Baseline Requirements' CRL Profile to ensure that all sharded CRLs contain the distributionPoint field.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>The following motion has been proposed by Aaron Gable of ISRG / Let's Encrypt, and endorsed by Clint Wilson of Apple, Corey Bonnell of DigiCert, and Dmitris Zacharopoulos of HARICA.<o:p></o:p></span></p><h1 style='mso-margin-top-alt:12.0pt;margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;line-height:16.8pt;break-after:avoid'><span lang=EN-US style='font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal'>Motion Begins<o:p></o:p></span></h1><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>This ballot modifies the </span><span lang=JA style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>¡§</span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates</span><span lang=JA style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>¡¨</span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'> (</span><span lang=JA style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>¡§</span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Baseline Requirements</span><span lang=JA style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>¡¨</span><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>), based on Version 1.8.4.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'><br>MODIFY the Baseline Requirements as specified in the following Redline:<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fcabforum%2Fservercert%2Fcompare%2Fbbca71465ed8a8a76383086039f52c750009286a..348756d64e863c19bcab404671abeeec985d6041&data=05%7C01%7Crealsky%40cht.com.tw%7C1ab2cbe2e2134433d6e908dabe3dbd71%7C54eb9440cf0345fe835e61bd4ce515c8%7C0%7C0%7C638031469634833596%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=wc1T29jBgFwBWEWaaB4Cm1XYedNecQ9k%2B4LITS%2BlCAo%3D&reserved=0" target="_blank">https://github.com/cabforum/servercert/compare/bbca71465ed8a8a76383086039f52c750009286a..348756d64e863c19bcab404671abeeec985d6041</a><o:p></o:p></span></p><h1 style='mso-margin-top-alt:12.0pt;margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;line-height:16.8pt;break-after:avoid'><span lang=EN-US style='font-size:16.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal'>Motion Ends<o:p></o:p></span></h1><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'><o:p> </o:p></span></p></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'><o:p> </o:p></span></p><h2 style='mso-margin-top-alt:2.0pt;margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;line-height:13.65pt;break-after:avoid'><span lang=EN-US style='font-size:13.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal'>Discussion (Completed)<o:p></o:p></span></h2><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Start time: 2022-10-22 00:00:00 UTC<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>End time: Not before 2022-10-29 00:00:00 UTC<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'><o:p> </o:p></span></p><h2 style='mso-margin-top-alt:2.0pt;margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;line-height:13.65pt;break-after:avoid'><span lang=EN-US style='font-size:13.0pt;font-family:"Calibri Light",sans-serif;color:#2F5496;font-weight:normal'>Vote for approval (7 days)<o:p></o:p></span></h2><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>Start time: 2022-10-31 16:00:00 UTC<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.5pt;font-family:"·L软 ¶®¶Â",serif;color:black'>End time: 2022-11-07 16:00:00 UTC<o:p></o:p></span></p></div></div></div></blockquote><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='background:white;padding:.75pt .75pt .75pt .75pt'></td></tr></table><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></body></html>