[cabfpub] Ballot[80 - revised] - BR Response for non-issued certificates

Ben Wilson ben at digicert.com
Thu Jul 26 20:35:04 UTC 2012


I re-endorse.

 

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On
Behalf Of Tim Moses
Sent: Thursday, July 26, 2012 2:29 PM
To: CABFPub
Subject: [cabfpub] Ballot[80 - revised] - BR Response for non-issued
certificates

 

Yngve Pettersen has accepted a "friendly amendment".  Ben Wilson and Carsten
Dahlenkamp are requested to confirm their continued endorsement.  The motion
now reads as follows:

... Motion begins....

Effective 1 Feb 2013

... Erratum begins ...

Insert a new section at the end of section 13.2 of the Baseline Requirements
with the following heading and text:

"13.2.6 Response for non-issued certificates

If the OCSP responder receives a request for status of a certificate that
has not been issued, then the responder SHOULD NOT respond with a "good"
status. The CA SHOULD monitor the responder for such requests as part of its
security response procedures.

Effective 1 August 2013, OCSP responders MUST NOT respond with a "good"
status for such certificates."

... Erratum ends ...

The ballot review period comes into effect at 21:00 UTC on 19 July 2012 and
will close at 21:00 UTC on 26 July 2012. Unless the motion is withdrawn
during the review period, the voting period will start immediately
thereafter and will close at 21:00 UTC on 2 August 2012. Votes must be cast
by posting an on-list reply to this thread.

... Motions ends ...

A vote in favor of the motion must indicate a clear 'yes' in the response.

A vote against must indicate a clear 'no' in the response. A vote to abstain
must indicate a clear 'abstain' in the response. Unclear responses will not
be counted. The latest vote received from any representative of a voting
member before the close of the voting period will be counted.

Voting members are listed here:

 <http://www.cabforum.org/forum.html> http://www.cabforum.org/forum.html

with the addition of  <https://www.cabforum.org/wiki/TrendMicro> TrendMicro.

In order for the motion to be adopted, two thirds or more of the votes cast
by members in the CA category and one half or more of the votes cast by
members in the browser category must be in favour. Also, at least seven
members must participate in the ballot, either by voting in favour, voting
against or abstaining

 

 

T: +1 613 270 3183

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20120726/78783279/attachment-0004.html>


More information about the Public mailing list