[cabf_netsec] Definition of "CA Equipment" for BR sec. 5.1

[Ben Wilson]

As a follow up to discussions today regarding the "zones" ballot and
putting physical security requirements into section 5.1 of the BRs, there
was a comment to one of the drafts[1] about "CA Equipment", since that term
is often used in section 5.1.  I doubt many CAs have defined the term in
their CPs or CPSes.  I'm also not sure whether it is defined in audit
criteria.

Here is a first stab at defining the term:

CA equipment:  servers (CA, database, CRL, OCSP, www, etc.), load
balancers, firewalls, routers, network appliances, security appliances, and
other hardware components used in the issuance and management of
certificates, but does not include hardware outside the physical security
boundary of the CA’s _____ such as CDNs, etc.

Thoughts or suggestions?

[1]
https://docs.google.com/document/d/1Zpae_ysYXc7mFLrRaIU5Z9AQ9WsuOHAPWvgTN2kTJ30/edit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/netsec/attachments/20200528/bafdc32f/attachment.html>