<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 85.05pt 70.85pt 85.05pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Agreed.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Bruce.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Tim Hollebeek <tim.hollebeek@digicert.com> <br>
<b>Sent:</b> Friday, July 28, 2023 3:33 PM<br>
<b>To:</b> Bruce Morton <Bruce.Morton@entrust.com>; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org>; Inigo Barreira <Inigo.Barreira@sectigo.com><br>
<b>Subject:</b> [EXTERNAL] RE: Notice of Review Period: Ballot SC63 - Make OCSP optional, require CRLs and Incentivize Automation<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">WARNING: This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" align="center">
</div>
<p class="MsoNormal">Just a helpful reminder to everyone trying to comply with this ballot to also check the Microsoft Root Program and its requirements around OCSP, which haven’t changed.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I don’t want anyone accidentally running afoul of those program requirements because they read the BRs in isolation.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-Tim<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Servercert-wg <<a href="mailto:servercert-wg-bounces@cabforum.org">servercert-wg-bounces@cabforum.org</a>>
<b>On Behalf Of </b>Bruce Morton via Servercert-wg<br>
<b>Sent:</b> Friday, July 28, 2023 9:32 AM<br>
<b>To:</b> Inigo Barreira <<a href="mailto:Inigo.Barreira@sectigo.com">Inigo.Barreira@sectigo.com</a>>; CA/B Forum Server Certificate WG Public Discussion List <<a href="mailto:servercert-wg@cabforum.org">servercert-wg@cabforum.org</a>><br>
<b>Subject:</b> Re: [Servercert-wg] Notice of Review Period: Ballot SC63 - Make OCSP optional, require CRLs and Incentivize Automation<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Was just doing an implementation review of this ballot and the “optional” date for not supporting OCSP is confusing. Section 4.10.2 states “The CA SHALL operate and maintain its CRL and optional OCSP capability with resources sufficient
to provide a response time of ten seconds or less under normal operating conditions.” There are no conditions. I will interpret that the ballot’s intent is that effective 15 March 2024, OCSP is optional and CRL is mandatory.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please advise, if I missed a condition for removal of OCSP in another section.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks, Bruce.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Servercert-wg <<a href="mailto:servercert-wg-bounces@cabforum.org">servercert-wg-bounces@cabforum.org</a>>
<b>On Behalf Of </b>Inigo Barreira via Servercert-wg<br>
<b>Sent:</b> Monday, July 17, 2023 6:32 AM<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <<a href="mailto:servercert-wg@cabforum.org">servercert-wg@cabforum.org</a>><br>
<b>Subject:</b> [EXTERNAL] [Servercert-wg] Notice of Review Period: Ballot SC63 - Make OCSP optional, require CRLs and Incentivize Automation<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="ES">WARNING: This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES">
<hr size="1" width="100%" align="center">
</span></div>
<div>
<div>
<p class="MsoNormal"><b><span lang="ES">NOTICE OF REVIEW PERIOD</span></b><span lang="ES"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="ES">This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3).
</span><span lang="EN-GB">This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is attached to this email, both in red-line and changes-accepted draft format,
in Word and PDF versions.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span lang="ES">Summary of Review</span></b><span lang="ES"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span lang="EN-GB">Ballot for Review: </span></b><a href="https://urldefense.com/v3/__https:/url.avanan.click/v2/___https:/cabforum.org/2023/07/14/ballot-sc-063-v4make-ocsp-optional-require-crls-and-incentivize-automation/___.YXAzOmRpZ2ljZXJ0OmE6bzo1MzJjODcwNzcwNDkxMDdmNDA3ZWY5NzAwMzFmYTQ4Nzo2OjQ4M2E6Zjg1NmVhNjEzNzBiNjM1ZjU2MjliNGJiOWM5Y2NjYzQ3MjkwOTZhYWZkNDE0ZWExY2MxNWU2YjY2MzFkZmRiYjpoOkY__;!!FJ-Y8qCqXTj2!aQNsILvFywxilb1UCK0gielDofnYv72PFhLWnK187fgBTQUpfH_GmAusrLy3A1IJot99ANFTiXJfxmVeWH2yt7P4RI2f$" title="Protected by Avanan: https://cabforum.org/2023/07/14/ballot-sc-063-v4make-ocsp-optional-require-crls-and-incentivize-automation/"><span lang="EN-GB">Ballot
SC-063 v4: Make OCSP Optional, Require CRLs, and Incentivize Automation – CAB Forum</span></a>
<span lang="EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB"><o:p> </o:p></span></i></p>
<p class="MsoNormal"><i><span lang="EN-GB">Start of Review Period: 17 July 2023 at 17:00 Eastern Time</span></i><span lang="EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span lang="EN-GB">End of Review Period: 17 August 2023 at 17:00 Eastern Time</span></i><span lang="EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-GB">Members with any Essential Claim(s) to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair (email to Iņigo Barreira <</span><a href="mailto:inigo.barreira@sectigo.com"><span lang="EN-GB">inigo.barreira@sectigo.com</span></a><span lang="EN-GB">>)
and also submit a copy to the CA/B Forum public mailing list (email to public at cabforum.org<</span><a href="mailto:public%20at%20cabforum.org"><span lang="EN-GB">mailto:public at cabforum.org</span></a><span lang="EN-GB">>) before the end of the Review Period.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="ES">For details, please see the current version of the
</span><a href="https://urldefense.com/v3/__https:/url.avanan.click/v2/___https:/cabforum.org/wp-content/uploads/CABF-IPR-Policy-v.1.3_4APR18.pdf___.YXAzOmRpZ2ljZXJ0OmE6bzo1MzJjODcwNzcwNDkxMDdmNDA3ZWY5NzAwMzFmYTQ4Nzo2OmM5YzA6OTQ3Y2U4YzBjOGI4NWVjNmMxYmZmMjM4ZDQxMmE2ZWY1MTZkODNmOWM2MTIzZTYyNDU5ZjM4MjE4OTgyZjg3NDpoOkY__;!!FJ-Y8qCqXTj2!aQNsILvFywxilb1UCK0gielDofnYv72PFhLWnK187fgBTQUpfH_GmAusrLy3A1IJot99ANFTiXJfxmVeWH2ytx9L45tx$" title="Protected by Avanan: https://cabforum.org/wp-content/uploads/CABF-IPR-Policy-v.1.3_4APR18.pdf"><span lang="ES">CA/Browser
Forum Intellectual Property Rights Policy</span></a><span lang="ES">.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="ES">(An optional template for submitting an Exclusion Notice is available at
</span><a href="https://urldefense.com/v3/__https:/url.avanan.click/v2/___https:/cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf___.YXAzOmRpZ2ljZXJ0OmE6bzo1MzJjODcwNzcwNDkxMDdmNDA3ZWY5NzAwMzFmYTQ4Nzo2OmQwODM6NTkxOTlhYTFkYWE0MjJiYzJkNThhOGEzZjk4ZDM1YWE1N2U0MGZkOTBjYWIwMDA3Njk4MTM1N2QwNjgxMGQ1NjpoOkY__;!!FJ-Y8qCqXTj2!aQNsILvFywxilb1UCK0gielDofnYv72PFhLWnK187fgBTQUpfH_GmAusrLy3A1IJot99ANFTiXJfxmVeWH2yty87Wwg2$" title="Protected by Avanan: https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf"><span lang="ES">https://cabforum.org/wp-content/uploads/Template-for-Exclusion-Notice.pdf</span></a><span lang="ES">)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><i>Any email and files/attachments transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the
information it contains. <u>Please notify Entrust immediately and delete the message from your system.</u></i>
<o:p></o:p></p>
</div>
</div>
</body>
</html>