[cabfpub] [TRANS] CA survey - CT Precertificate format in6962-bis

[Rich Smith]

> -----Original Message-----
> From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org]
> On Behalf Of Stephen Davidson
> 
<snip>
  it goes live in 89 days.
</snip>
[RWS] Unless Ballot 134 fails to pass.  IF that happens, the CAs which issue
EV certificates will have a choice to make.  Either issue pre-certificates
with the same serial number in contravention of the EV Guidelines to comply
with Google's policy, and thereby risk failing their WebTrust or ETSI
compliance audit, OR not issue pre-certificates with the same serial number,
remain in compliance with the EV Guidelines, and let Google deal with the
site operators whose compliant EV certificates no longer work in Chrome.

> Best regards, Stephen
> 
> 
> 
> -----Original Message-----
> From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org]
> On Behalf Of Rob Stradling
> Sent: Thursday, October 02, 2014 5:36 PM
> To: public at cabforum.org
> Subject: [cabfpub] [TRANS] CA survey - CT Precertificate format in
> 6962-bis
> 
> [Only CABForum members can post to this list, hence why I'm forwarding
> this message from Melinda Shore]
> 
> 
> Hi, all:
> 
> I co-chair the IETF "trans" working group, which is in the process of
> developing a standards-track specification for certificate transparency
> (logging).  We're trying to get a handle on the potential impact of
> including serial numbers in precertificates.
> Are there CAs who would otherwise implement CT but for whom either
> needing to know the serial number of a certificate prior to it being
> issued, or having to issue a certificate and precertificate
> simultaneously would be 1) a complete non-starter, or 2) excessively
> onerous?
> 
> Thanks,
> 
> Melinda
> 
> 
> --
> Rob Stradling
> Senior Research & Development Scientist
> COMODO - Creating Trust Online
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public
> 
> 
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6378 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20141003/cc985a67/attachment.bin