[cabf_governance] CABF as a formal organization

Dean Coclin Dean_Coclin at symantec.com
Wed Nov 30 12:58:43 MST 2016


These are good points Moudrick and I’ll leave it to Arno/Inigo to respond.


Dean

 

From: Govreform [mailto:govreform-bounces at cabforum.org] On Behalf Of Moudrick M. Dadashov via Govreform
Sent: Friday, November 18, 2016 5:31 AM
To: CA/Browser Forum Governance WG List <govreform at cabforum.org>
Cc: Moudrick M. Dadashov <md at ssc.lt>
Subject: Re: [cabf_governance] CABF as a formal organization

 

Please, if I may, a couple more questions:

1) Why in some cases CA Browser Forum has been recognized by ETSI a "real entity" (e.g. see ETSI EN 319 412-4 V1.1.1 (2016-02) Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 4: Certificate profile for web site certificates):

(a) "The present document aims to maximize the interoperability of systems issuing and using certificates both in the European context under the Regulation (EU) No 910/2014 [i.3] and in the wider international environment, also by meeting requirements from CA Browser Forum.";

(b) The following referenced documents are necessary for the application of the present document.
      [2] CA/Browser Forum: "Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates".
      [3] CA/Browser Forum: "Guidelines for The Issuance and Management of Extended Validation Certificates".

whereas for a "formal partnership" the recognition above doesn't apply?

2) Wouldn't it be appropriate for ETSI (with the assistance of Commission?) to take internal arrangements to recognize the forum a "formal partner"?   

Thanks,
M.D.

On 11/17/2016 9:53 PM, Virginia Fournier via Govreform wrote:

Hi - some additional things to think about: 

 

1.  Do the benefits of a “formal partnership" with ETSI outweigh the risks Kirk has outlined below?  What are those benefits from a CAB Forum standpoint? What would CAB Forum get that they aren’t already getting?

 

2.  How would CAB Forum’s IPR Policy need to change to be “compatible” with ETSI’s policy?  ETSI’s IPR policy is quite a bit different from the CAB Forum’s policy.  

http://www.etsi.org/images/files/ipr/etsi-ipr-policy.pdf





3.  Is CAB Forum prepared to charge fees for participation and to have a governing board who’s responsible for all of the overhead, budget, corporate responsibilities, legal matters, etc.?









Best regards,

 

Virginia Fournier

Senior Standards Counsel

 Apple Inc.

☏ 669-227-9595

✉︎ vmf at apple.com <mailto:vmf at apple.com> 

 

 

 

 

 

On Nov 16, 2016, at 9:23 PM, Kirk Hall via Govreform <govreform at cabforum.org <mailto:govreform at cabforum.org> > wrote:

 

Thanks, Dean.  I don’t feel strongly about this, but I have been through this before with another organization. 

 

People say “we need to be a real entity” so they decide to incorporate.  What form – if a non-profit corporation, then you have to meet certain government criteria, and maybe file with the IRS to gain non-profit status.  

 

Where?  Someone’s home state or province?  Delaware?  Who will be the registered contact people?  Then you have to figure out how to pay the annual filing fees and fees for a registered agent.  Oh, yeah – you need articles of incorporation, officers, etc.  And you probably have to file an annual tax return, state and federal.  And then after a couple of years, everyone forgets and someone who is no longer active is still listed as President or Secretary.  And maybe the corporation gets dissolved for non-compliance.

 

Then there is the issue of being sued – in one sense, no big deal if the corporation has no assets, just don’t respond to the lawsuit (of course, a lawyer needs to look at this and advise the corporation - $$), the person suing (to stop something, or for damages) gets a default judgment, and the CABF as a corporation is dissolved.   Then what?

 

On the other hand, if the CABF becomes a corporation, we can get an EV cert at last!  :)

 

From: Govreform [mailto:govreform-bounces at cabforum.org] On Behalf Of Dean Coclin via Govreform
Sent: Wednesday, November 16, 2016 8:22 PM
To: Govreform at cabforum.org <mailto:Govreform at cabforum.org> 
Cc: Dean Coclin  <mailto:Dean_Coclin at symantec.com> <Dean_Coclin at symantec.com>
Subject: [cabf_governance] FW: CABF as a formal organization

 

As discussed on the last call, there was interest in having the forum become a formal organization. Below is the reason from ETSI, for discussion on the next call.

Dean

 

From: Sonia Compans 
Sent: Wednesday, November 16, 2016 11:18 PM
To: Dean Coclin 
Cc:  <mailto:arno.fiedler at outlook.com> arno.fiedler at outlook.com; Xavier Piednoir 
Subject: RE: CABF as a formal organization

 

Hi Dean,

 

This was even faster than I expected as I could get the feedback from our External Relations officer quickly (Xavier Piednoir, here in copy).

 

Let me explain the potential benefits of CAB Forum becoming a legal entity, at least from the ETSI viewpoint.

For several years now, ETSI and CAB Forum have had some kind of collaboration for policies for website certificates resulting in ETSI standards building on CAB Forum specifications and ETSI scheme being recognized by CAB Forum. As CAB Forum has so far not been a legal entity, ETSI and CAB Forum signed a Letter of Intent (in 2009) which only allows exchanging informational material and no having technical collaboration. So far the collaboration has in fact taken place thanks to common members, i.e. Izenpe.

If CAB Forum becomes a legal entity, ETSI and CAB Forum could set up a formal partnership and sign a Memorandum of Understanding or a cooperation agreement.

An MoU would allow formal technical collaboration with nomination of CAB Forum observers in ETSI TC ESI  and vice-versa, with exchange of working documents and drafts, technical discussions, joint promotion through e.g. workshops, literature.

A cooperation agreement allows all what is possible with an MoU plus creating joint specifications, incorporation of text from the other party, adoption of publicly available specifications  in to ETSI Technical Specifications or Technical Reports. This level requires the compatibility of the Partner’s IPR Policy with ETSI’s.

 

I hope this helps and we would be interested in knowing the outcome of CABF discussions.

 

Best regards

 

Sonia Compans  – Technical Officer

ETSI ● www.etsi.org <http://www.etsi.org/>  ●  <mailto:sonia.compans at etsi.org> sonia.compans at etsi.org

Phone: +33 (0)4 92 94 43 36 ● Mobile: +33 (0)6 67 15 58 49

This email may contain confidential information and is intended for the use of the addressee only. Any unauthorized use may be unlawful. If you receive this email by mistake, please advise the sender immediately by using the reply facility in your email software. Thank you for your co-operation.

_______________________________________________
Govreform mailing list
Govreform at cabforum.org <mailto:Govreform at cabforum.org> 
https://cabforum.org/mailman/listinfo/govreform

 






_______________________________________________
Govreform mailing list
Govreform at cabforum.org <mailto:Govreform at cabforum.org> 
https://cabforum.org/mailman/listinfo/govreform

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/govreform/attachments/20161130/bf8fe4ca/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5723 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/govreform/attachments/20161130/bf8fe4ca/attachment-0001.bin>


More information about the Govreform mailing list