[cabfpub] Ballot 102 - BR 9.2.3 domainComponents

Moudrick M. Dadashov md at ssc.lt
Sat Jun 8 16:57:41 UTC 2013


SSC votes: "Yes".

Thanks,
M.D.

On 6/7/2013 9:41 PM, Dean Coclin wrote:
>
> Symantec votes YES.
>
> *From:*public-bounces at cabforum.org 
> [mailto:public-bounces at cabforum.org] *On Behalf Of *Ben Wilson
> *Sent:* Friday, May 24, 2013 6:18 PM
> *To:* public at cabforum.org
> *Subject:* [cabfpub] Ballot 102 - BR 9.2.3 domainComponents
>
> Ballot 102 - BR 9.2.3 domainComponents
>
> Jeremy Rowley of DigiCert made the following motion, and Robin Alden 
> from Comodo and Geoffrey Keating from Apple endorsed it:
>
> Motion Begins
>
> EFFECTIVE IMMEDIATELY, in order to conform to requirements of other 
> industry bodies, including the Internet Grid Trust Federation, and to 
> allow the encoding of domain components in certificates that interact 
> with the configurations of some LDAP directories, we propose amending 
> Section 9.2.3 of the Baseline Requirements for the Issuance and 
> Management of Publicly-Trusted Certificates as follows:
>
> DELETE
>
> 9.2.3      Subject Domain Component Field
>
> Certificate Field:  subject:domainComponent (OID 
> 0.9.2342.19200300.100.1.25)
>
> Required/Optional:  Optional.
>
> Contents:  If present, this field MUST contain all components of the 
> subject's Registered Domain Name in ordered sequence, with the most 
> significant component, closest to the root of the namespace, written 
> last.
>
> and INSERT:
>
> 9.2.3      Subject Domain Component Field
>
> Certificate Field:  subject:domainComponent (OID 
> 0.9.2342.19200300.100.1.25)
>
> Required/Optional:  Optional.
>
> Contents:  If present, this field MUST contain a label from a Domain 
> Name.
>
> The domainComponent fields for each Domain Name MUST be in a single 
> ordered sequence containing all labels from the Domain name.  The 
> labels MUST be encoded in the reverse order to the on-wire 
> representation of domain names in the DNS protocol, so that the label 
> closest to the root is encoded first.
>
> The CA MUST ensure that the certificate is issued with the consent of, 
> and according to procedures established by, the owner of each Domain 
> Name.
>
> =====Motion Ends=====
>
> The review period for this ballot shall commence at 21:00 UTC on 24 
> May 2013 and will close at 21:00 UTC on 31 May 2013. Unless the motion 
> is withdrawn during the review period, the voting period will start 
> immediately thereafter and will close at 21:00 UTC on 7 June 2013. 
> Votes must be cast by posting an on-list reply to this thread.
>
> Motion Ends
>
> A vote in favor of the motion must indicate a clear 'yes' in the 
> response. A vote against must indicate a clear 'no' in the response. A 
> vote to abstain must indicate a clear 'abstain' in the response. 
> Unclear responses will not be counted. The latest vote received from 
> any representative of a voting member before the close of the voting 
> period will be counted. Voting members are listed here: 
> http://www.cabforum.org/forum.html
>
> In order for the motion to be adopted, two thirds or more of the votes 
> cast by members in the CA category and one half or more of the votes 
> cast by members in the browser category must be in favor. Also, at 
> least seven members must participate in the ballot, either by voting 
> in favor, voting against, or abstaining.
>
>
>
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130608/0b874612/attachment-0003.html>


More information about the Public mailing list