[cabfpub] Domain Validation Revision

Tim Shirley TShirley at trustwave.com
Fri Feb 13 17:24:54 UTC 2015

While we're in this section, do we want to consider removing the "registrant" address from item 3 as one of the WHOIS options?  I only mention it because Mozilla lists only the technical and administrative fields as acceptable options at https://wiki.mozilla.org/CA:Problematic_Practices#Email_Address_Prefixes_for_DV_Certs.  Or was that simply an oversight on Mozilla's part?

I realize specific browser programs can and do make their requirements more stringent than the Baseline Requirements, and that this is not even a requirement from Mozilla as of yet.  But that page says discussion is underway to make it mandatory, and if indeed Mozilla does not consider the registrant field to be acceptable for validating domain control, then it might reduce potential confusion to include the same restriction here.


From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Jeremy Rowley
Sent: Thursday, February 12, 2015 9:55 PM
To: CABFPub (public at cabforum.org)
Subject: [cabfpub] Domain Validation Revision

Attached is a draft proposal from the EV working group about revising the domain validation in the BRs.  The intent is 1) to eliminate the "any other option" (as it made domain validation essentially meaningless, 2) tighten up the domain validation language, and 3) permit attorney/accountants to draft the domain authorization document.

Note that revising this section will automatically revise domain validation in EV. Also note that this is a draft from the working group and not yet a proposed ballot.



This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20150213/b6d3994d/attachment-0003.html>

More information about the Public mailing list