<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">OISTE Votes Yes to <span style="color: rgb(14, 16, 26); font-family: Arial, sans-serif; font-weight: 700;">SC-067 V3</span><div><br><blockquote type="cite"><div>On 15 Jul 2024, at 17:29, Chris Clements via Servercert-wg <servercert-wg@cabforum.org> wrote:</div><br class="Apple-interchange-newline"><div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div>
<div dir="ltr"><span id="gmail-docs-internal-guid-56746466-7fff-ffb7-ae0c-c5eacc8cb976"><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Purpose
of Ballot SC-067 V3</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div>
<br><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">This Ballot
proposes updates to the </span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-style:italic;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Baseline Requirements for the
Issuance and Management of Publicly-Trusted TLS Server Certificates</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> (i.e.,
TLS BRs) related to “Multi-Perspective Issuance Corroboration” (“MPIC”).</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Background</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- MPIC refers
to performing domain validation and CAA checks from multiple Network Perspectives before certificate issuance, as described within the Ballot for the applicable validation methods in TLS BR Sections 3.2.2.4 and 3.2.2.5.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Not all
methods described in TLS BR Sections 3.2.2.4 and 3.2.2.5 will require using MPIC.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- This work
was most recently motivated by research presented at Face-to-Face 58 [1] by Princeton University, but has been discussed for years prior as well.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- The goal
of this proposal is to make it more difficult for adversaries to successfully launch equally-specific prefix attacks against the domain validation processes described in the TLS BRs.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Additional
background information can be found in an update shared at Face-to-Face 60 [2].</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Benefits
of Adoption</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Recent publicly-documented
attacks have used BGP hijacks to fool domain control validation and obtain malicious certificates, which led to the impersonation of HTTPS websites [3][</span><span style="font-family: Arial, sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">4</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">].</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Routing
security defenses (e.g., RPKI) can mitigate the risk of global BGP attacks, but localized, equally-specific BGP attacks still pose a significant threat to the Web PKI [5][6].</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Corroborating
domain control validation checks from multiple network perspectives (i.e., MPIC) spread across the Internet substantially reduces the threat posed by equally-specific BGP attacks, ensuring the integrity of domain validation and issuance decisions [5][7][8].</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Existing
deployments of MPIC at the scale of millions of certificates a day demonstrate the feasibility of this technique at Internet scale [7][9].</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Intellectual
Property (IP) Disclosure</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- While not
a Server Certificate Working Group Member, researchers from Princeton University presented at Face-to-Face 58, provided academic expertise, and highlighted publicly-available peer-reviewed research to support Members in drafting this ballot.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- The Princeton
University researchers indicate that they have not filed for any patents relating to their MPIC work and do not plan to do so in the future.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Princeton
University has indicated that it is unable to agree to the CA/Browser Forum IPR agreement because it could encumber inventions invented by researchers not involved in the development of MPIC or with the CA/B Forum.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Princeton
University has instead provided the attached IPR statement. Pursuant to the IPR statement, Princeton University has granted a worldwide royalty free license to the intellectual property in MPIC developed by the researchers and has made representations regarding
its lack of knowledge of any other Princeton intellectual property needed to implement MPIC.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- The attached
IPR statement has not changed since disclosed in Discussion Round 1</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">- For clarity,
Princeton University’s IPR statement is NOT intended to replace the Forum’s IPR agreement or allow Princeton to participate in the Forum in any capacity.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">- Members seeking
legal advice regarding this ballot should consult their own counsel.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Proposal
Revision History</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Pre-Ballot
Release #1 (work team artifacts and broader Validation Subcommittee collaboration) [10]</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">- Pre-Ballot
Release #2 [11]</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Previous
versions of this Ballot</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(80,0,80);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">-</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
Ballot Release #1 [12] (comparing Version 2 to Version 1) [13]. Note, some of the changes represented in the comparison are updates made by other ballots that have since passed (e.g., SC-069).</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">-
Ballot Release #2 [14] (comparing Version 3 to Version 2) [15]. Note, some of the changes represented in the comparison are updates made by other ballots that have since passed (e.g., SC-072).</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">References</span><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[1]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__cabforum.org_wp-2Dcontent_uploads_13-2DCAB-2DForum-2Dface-2Dto-2Dface-2Dmultiple-2Dvantage-2Dpoints.pdf&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=hk27XHbgi9xSgS0B5OMnS78CUAi0AIdFascXdgEVCMQ&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://cabforum.org/wp-content/uploads/13-CAB-Forum-face-to-face-multiple-vantage-points.pdf</span></a></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[2]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__drive.google.com_file_d_1LTwtAwHXcSaPVSsqKQztNJrV2ozHJ7ZL_view-3Fusp-3Ddrive-5Flink&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=RpCzNbmHqe_WTOV90wcp62pPIoDb7vKY4dydBw2ZNMg&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://drive.google.com/file/d/1LTwtAwHXcSaPVSsqKQztNJrV2ozHJ7ZL/view?usp=drive_link</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[3]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__medium.com_s2wblog_post-2Dmortem-2Dof-2Dklayswap-2Dincident-2Dthrough-2Dbgp-2Dhijacking-2Den-2D3ed7e33de600&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=u1M6FW9BBSQssvDgVKzkJtW3A5V9EOYipbFKg8l4ACk&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://medium.com/s2wblog/post-mortem-of-klayswap-incident-through-bgp-hijacking-en-3ed7e33de600</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[4]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.coinbase.com_blog_celer-2Dbridge-2Dincident-2Danalysis&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=DFWyyxayVtzj_7UydWz5iBg_0S2f9OxFElmUfocuH8c&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://www.coinbase.com/blog/celer-bridge-incident-analysis</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[5]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.usenix.org_conference_usenixsecurity23_presentation_cimaszewski&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=36dgskzWXqOZGN3lHidq6KEj7ApK2O6-LW1Ek9Ban3k&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://www.usenix.org/conference/usenixsecurity23/presentation/cimaszewski</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[6]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.blackhat.com_docs_us-2D15_materials_us-2D15-2DGavrichenkov-2DBreaking-2DHTTPS-2DWith-2DBGP-2DHijacking-2Dwp.pdf&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=jqT4hDPDmdDiJgJha6rFLpT2IySSe56_6ZcSDvUT3W4&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://www.blackhat.com/docs/us-15/materials/us-15-Gavrichenkov-Breaking-HTTPS-With-BGP-Hijacking-wp.pdf</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[7]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.usenix.org_conference_usenixsecurity21_presentation_birge-2Dlee&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=rUmPLedRyyHhXaZiDyvKqbEsBWBFud9KdXiebT7AQdg&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://www.usenix.org/conference/usenixsecurity21/presentation/birge-lee</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[8]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.usenix.org_conference_usenixsecurity18_presentation_birge-2Dlee&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=gaqOGRnWuYGfzTgLwg1iMmEat25WRgiUHP1zqn4-XV0&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://www.usenix.org/conference/usenixsecurity18/presentation/birge-lee</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[9]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__security.googleblog.com_2023_05_google-2Dtrust-2Dservices-2Dacme-2Dapi-5F0503894189.html&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=YdbAwURPU0-QW7V7eOZzEDPoqouJCroJfDQpMbNGp-A&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://security.googleblog.com/2023/05/google-trust-services-acme-api_0503894189.html</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[10]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ryancdickson_staging_pull_6&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=57yl1IynGbhAyG8rW2W-RYWgaCk6URk0epWUhIYiIwY&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/ryancdickson/staging/pull/6</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[11]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ryancdickson_staging_pull_8&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=t_RK2hLdcCzcMujwUXZtbMvE0D0FJIPwGHHUymGfqQA&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/ryancdickson/staging/pull/8</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[12]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_cabforum_servercert_pull_487&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=PojcD01SGxsYx1JoR-DH2BXj-vAHchMaFJ68D2uFo34&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/cabforum/servercert/pull/487</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[13]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_cabforum_servercert_compare_6d10abda8980c6eb941987d3fc26e753e62858c0..5224983ef0a6f94c18808ea3469e7a5ae35746e5&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=3uyWhI3p9mBSU7bZi15zj7lRH0Oix2M5ryLfaPv-WKQ&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/cabforum/servercert/compare/6d10abda8980c6eb941987d3fc26e753e62858c0..5224983ef0a6f94c18808ea3469e7a5ae35746e5</span></a></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[14]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_cabforum_servercert_pull_507&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=52kLXXu4gRYzu803N5wWtH8lLdroh7OrNG3F-CTFNBw&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/cabforum/servercert/pull/507</span></a><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">[15]
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_cabforum_servercert_compare_5224983ef0a6f94c18808ea3469e7a5ae35746e5..2dcf1a8fe5fc7b6a864b5767ab1db718bc447463&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=HNLJ48jeFQjYUa7jPt_3w0XHKnt6mFmFO8HzOBAyfLU&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/cabforum/servercert/compare/5224983ef0a6f94c18808ea3469e7a5ae35746e5..2dcf1a8fe5fc7b6a864b5767ab1db718bc447463</span></a></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family:Arial,sans-serif;color:rgb(14,16,26);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">The following
motion has been proposed by Chris Clements and Ryan Dickson of Google (Chrome Root Program) and endorsed by Aaron Gable (ISRG / Let’s Encrypt) and Wayne Thayer (Fastly). </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt; padding: 0pt 0pt 12pt;">
<br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">—
Motion Begins —</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">This ballot modifies
the “Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates” (“Baseline Requirements”), based on Version 2.0.4.</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">MODIFY the Baseline
Requirements as specified in the following Redline:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_cabforum_servercert_compare_c4a34fe2292022e0a04ba66b5a85df75907ac2a2..2dcf1a8fe5fc7b6a864b5767ab1db718bc447463&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=F2K6BqmctpcB-XQFWX3-yy5Lrc5Htx0kpNjgJas0i6E&e=" style="text-decoration-line:none"><span style="font-family:Arial,sans-serif;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/cabforum/servercert/compare/c4a34fe2292022e0a04ba66b5a85df75907ac2a2..2dcf1a8fe5fc7b6a864b5767ab1db718bc447463</span></a><span style="font-family: Arial, sans-serif; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;"> </span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">—
Motion Ends —</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">This ballot proposes
a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; background-color: transparent; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">Discussion
(57 days)</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">-
Start: 2024-05-20 14:30:00 UTC</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">-
End: 2024-07-15 15:29:59 UTC</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><br>
</div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">Vote
for approval (7 days)</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">-
Start: 2024-07-15 15:30:00 UTC</span></div><div style="line-height: 1.2; margin-top: 0pt; margin-bottom: 0pt;"><span style="font-family: Arial, sans-serif; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; vertical-align: baseline;">-
End: 2024-07-22 15:30:00 UTC</span></div>
</span><br class="gmail-Apple-interchange-newline">
</div>
</div>
<span id="cid:f_lyn4ihd90"><Princeton MPIC Commitment - final draft 2024.01.11 (003).pdf></span>_______________________________________________<br>Servercert-wg mailing list<br>Servercert-wg@cabforum.org<br>https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.cabforum.org_mailman_listinfo_servercert-2Dwg&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=f1KWC1EW3Za0wc_7fQ8pPPvnRwfPY_-0BalhHoVxoEAazgc-MMFG1ZflOMlLCrAI&s=0LmmXd63RzZCMsWAE9mvmCCjMkF6V5vKxq8VgjGbIyQ&e=<br></div></blockquote></div><br><div>
<meta charset="UTF-8"><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div style="text-align: start; text-indent: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><font style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; font-size: 12px; font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; line-height: normal; text-align: start; text-indent: 0px;"><b><font color="#f62400" style="font-size: 11px;"><br class="Apple-interchange-newline">WISeKey SA<br></font></b></font><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; text-align: start; text-indent: 0px;"><font style="color: rgb(0, 0, 0); font-size: 12px; font-weight: normal; font-style: normal;"><span style="font-size: 11px;"><b>Pedro Fuentes<br></b>CSO - Trust Services Manager</span><br><font size="1">Office: + 41 (0) 22 594 30 00<br>Mobile: + 41 (0) </font></font><span style="color: rgb(0, 0, 0); font-size: x-small; font-weight: normal; font-style: normal;">791 274 790</span></div><div style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; text-align: start; text-indent: 0px;"><font style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px;"><font size="1">Address: </font></font><font size="1">Avenue Louis-Casaï 58 | </font><span style="font-size: x-small;">1216 Cointrin | Switzerland</span></div><div style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; text-align: start; text-indent: 0px;"><font><font size="1" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px;"><b>Stay connected with <a href="http://www.wisekey.com"><font color="#f62400">WISeKey</font></a><br></b></font></font><span style="caret-color: rgb(0, 0, 0); color: rgb(169, 169, 169); font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; orphans: 2; widows: 2;"><br></span></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; font-size: 12px; font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; line-height: normal; text-align: start; text-indent: 0px;"><div style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal;"><span style="orphans: 2; widows: 2;"><font size="1" color="#78a600"><b>THIS IS A TRUSTED MAIL</b>: This message is digitally signed with a WISeKey identity. If you get a mail from WISeKey please check the signature to avoid security risks</font></span></div><div style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal;"><span style="orphans: 2; widows: 2; font-size: 9px;"><font color="#a9a9a9"><br></font></span></div><div style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal;"><div style="orphans: 2; widows: 2;"><font color="#a9a9a9" style="font-size: 9px;"><b>CONFIDENTIALITY: </b>This email and any files transmitted with it can be confidential and it’s intended solely for the use of the individual or entity to which they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. If you have received this email in error please notify the sender</font></div><div style="orphans: 2; widows: 2;"><font color="#a9a9a9" style="font-size: 9px;"><br></font></div><div style="orphans: 2; widows: 2;"><font color="#a9a9a9" style="font-size: 9px;"><b>DISCLAIMER: </b>WISeKey does not warrant the accuracy or completeness of this message and does not accept any liability for any errors or omissions herein as this message has been transmitted over a public network. Internet communications cannot be guaranteed to be secure or error-free as information may be intercepted, corrupted, or contain viruses. Attachments to this e-mail are checked for viruses; however, we do not accept any liability for any damage sustained by viruses and therefore you are kindly requested to check for viruses upon receipt.</font></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div>
<br></body></html>