[cabfpub] Ballot 102 - BR 9.2.3 domainComponents

[Geoff Keating]

Apple votes YES.

On 24/05/2013, at 3:18 PM, Ben Wilson <ben at digicert.com> wrote:

> Ballot 102 - BR 9.2.3 domainComponents
> Jeremy Rowley of DigiCert made the following motion, and Robin Alden from Comodo and Geoffrey Keating from Apple endorsed it:
>  
> Motion Begins
>  
> EFFECTIVE IMMEDIATELY, in order to conform to requirements of other industry bodies, including the Internet Grid Trust Federation, and to allow the encoding of domain components in certificates that interact with the configurations of some LDAP directories, we propose amending Section 9.2.3 of the Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates as follows:
>  
> DELETE
>  
> 9.2.3      Subject Domain Component Field
>  
> Certificate Field:  subject:domainComponent (OID 0.9.2342.19200300.100.1.25)
> Required/Optional:  Optional. 
>  
> Contents:  If present, this field MUST contain all components of the subject’s Registered Domain Name in ordered sequence, with the most significant component, closest to the root of the namespace, written last. 
>  
> and INSERT:
>  
> 9.2.3      Subject Domain Component Field
>  
> Certificate Field:  subject:domainComponent (OID 0.9.2342.19200300.100.1.25)
>  
> Required/Optional:  Optional. 
>  
> Contents:  If present, this field MUST contain a label from a Domain Name.  
>  
> The domainComponent fields for each Domain Name MUST be in a single ordered sequence containing all labels from the Domain name.  The labels MUST be encoded in the reverse order to the on-wire representation of domain names in the DNS protocol, so that the label closest to the root is encoded first.
>  
> The CA MUST ensure that the certificate is issued with the consent of, and according to procedures established by, the owner of each Domain Name. 
>  
> =====Motion Ends=====

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130606/b421022b/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4316 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130606/b421022b/attachment-0001.p7s>