[cabfpub] Ballot[83] - Adopt Network and Certificate System Security Requirements

Wed Aug 22 17:00:11 UTC 2012

We have started - there are certainly some items that may create some issues

Donald E. Sheehy, CA·CISA, CRISC, CIPP/C
Associate Partner, Enterprise Risk
Deloitte & Touche LLP

From: Ben Wilson [mailto:ben at digicert.com]
Sent: Tuesday, August 21, 2012 1:04 PM
To: Sheehy, Don (CA - Toronto); 'CABFPub'
Cc: nick.pope at thales-esecurity.com; arno.fiedler at nimbus-berlin.com
Subject: RE: [cabfpub] Ballot[83] - Adopt Network and Certificate System Security Requirements

Yes.  I need to start my work again on the comparisons with WebTrust and ETSI and begin working with you and representatives of ETSI to normalize any new language into each of your respective audit criteria.

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Sheehy, Don (CA - Toronto)
Sent: Tuesday, August 21, 2012 10:09 AM
To: Stephen Davidson; CABFPub
Subject: Re: [cabfpub] Ballot[83] - Adopt Network and Certificate System Security Requirements

Do we have the final outcome for this ?
Donald E. Sheehy, CA·CISA, CRISC, CIPP/C
Associate Partner, Enterprise Risk
Deloitte & Touche LLP

From: public-bounces at cabforum.org<mailto:public-bounces at cabforum.org> [mailto:public-bounces at cabforum.org]<mailto:[mailto:public-bounces at cabforum.org]> On Behalf Of Stephen Davidson
Sent: Friday, August 03, 2012 4:54 PM
To: Tim Moses; CABFPub
Subject: Re: [cabfpub] Ballot[83] - Adopt Network and Certificate System Security Requirements

QuoVadis votes yes.
We've been working on this for a long while:  it's time to fish or go cut bait.  If there are problem areas, such as audit and implementation, let's deal with them through the errata process.

Regards, Stephen Davidson
QuoVadis
________________________________
From: public-bounces at cabforum.org<mailto:public-bounces at cabforum.org> [public-bounces at cabforum.org] on behalf of Tim Moses [tim.moses at entrust.com]
Sent: Monday, July 23, 2012 10:23 AM
To: CABFPub
Subject: [cabfpub] Ballot[83] - Adopt Network and Certificate System Security Requirements

Ben Wilson made the following motion, and Bill Madell and Rick Andrews endorsed it:

Motion begins

As of 1 January 2013 ("Effective Date"), the CA/Browser Forum adopts the "Network and Certificate System Security Requirements" Ballot Draft 1 (available here: https://www.cabforum.org/wiki/Balloted%20Drafts) as Version 1.0. Upon adoption the Ballot Draft shall be assigned a version number of 1.0 and be posted as a Forum Guideline to the cabforum.org Web site.

The members request that those members who have worked on the Network and Certificate System Security Requirements coordinate with the WebTrust<https://www.cabforum.org/wiki/WebTrust> Task Force and ETSI and work on adaptations of the Network and Certificate System Security Requirements that can be incorporated into the respective WebTrust<https://www.cabforum.org/wiki/WebTrust> and ETSI audit criteria as soon as feasible.

The ballot review period comes into effect at 2100 UTC on 20 July '12 and will close at 2100 UTC on 27 July '12. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2100 UTC on 3 Aug '12. Votes must be cast by posting an on-list reply to this thread.

Motion ends

A vote in favour of the motion must indicate a clear 'yes' in the response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close of the voting period will be counted.

Voting members are listed here:

http://www.cabforum.org/forum.html

with the addition of TrendMicro<https://www.cabforum.org/wiki/TrendMicro>.

In order for the motion to be adopted, two thirds or more of the votes cast by members in the CA category and one half or more of the votes cast by members in the browser category must be in favour. Also, at least seven members must participate in the ballot, either by voting in favour, voting against or abstaining.

T: +1 613 270 3183

________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
Information confidentielle: Le présent message, ainsi que tout fichier qui y est joint, est envoyé à l'intention exclusive de son ou de ses destinataires; il est de nature confidentielle et peut constituer une information privilégiée. Nous avertissons toute personne autre que le destinataire prévu que tout examen, réacheminement, impression, copie, distribution ou autre utilisation de ce message et de tout fichier qui y est joint est strictement interdit. Si vous n'êtes pas le destinataire prévu, veuillez en aviser immédiatement l'expéditeur par retour de courriel et supprimer ce message et tout document joint de votre système. Merci.

Confidentiality Warning: This message and any attachments are
intended only for the use of the intended recipient(s), are
confidential, and may be privileged. If you are not the intended
recipient, you are hereby notified that any review, retransmission,
conversion to hard copy, copying, circulation or other use of this
message and any attachments is strictly prohibited. If you are not
the intended recipient, please notify the sender immediately by
return e-mail, and delete this message and any attachments from
your system. Thank you.	
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20120822/117625f8/attachment-0004.html>