[cabfpub] Ballot 161 - Notification of incorrect issuance

[Eneli Kirme]

Hi, 

Sertifitseerimiskeskus votes 'no’.


For clarification, we are not against the original idea but against too broad wording and possible various interpretations.


Best regards, 

Eneli Kirme

Business Development Manager
Certification Centre / AS Sertifitseerimiskeskus
+372 53443335
eneli.kirme at sk.ee


> 
> 
>> -----Original Message-----
>> From: public-bounces at cabforum.org [mailto:public-
>> bounces at cabforum.org] On
>> Behalf Of Sigbjørn Vik
>> Sent: Friday, January 29, 2016 2:32 AM
>> To: public at cabforum.org
>> Subject: [cabfpub] Ballot 161 - Notification of incorrect issuance
>> 
>> Ballot 161 - Notification of incorrect issuance
>> 
>> Based on extensive discussions in the forum, Sigbjørn Vik from Opera
>> proposes the following ballot, endorsed by Ryan Sleevi from Google and
>> Gervase Markham from Mozilla.
>> 
>> -- MOTION BEGINS --
>> 
>> The following text is added as a sub-section to section 2.2 of the
> Baseline
>> Requirements:
>> 
>> 2.2.1 Notification of incorrect issuance
>> 
>> In the event that a CA issues a certificate in violation of these
>> requirements, the CA SHALL publicly disclose a report within one week of
>> becoming aware of the violation. A link to the report SHALL simultaneously
>> be sent to incidents at cabforum.org.
>> 
>> Effective 01-Jul-16, the CA SHALL in its Certificate Policy and/or
>> Certification Practice Statement announce where such reports will be
> found.
>> The location SHALL be as accessible as the CP/CPS.
>> 
>> The report SHALL publicize details about what the error was, what caused
> the
>> error, time of issuance and discovery, and public certificates for all
>> issuer certificates in the trust chain.
>> 
>> The report SHALL publicize the full public certificate, with the following
>> exception: For certificates issued prior to 01-Mar-16 the report MAY
>> truncate Subject Distinguished Name fields and subjectAltName extension
>> values to the registerable domain name.
>> 
>> The report SHALL be made available to the CAs Qualified Auditor for the
> next
>> Audit Report.
>> 
>> -- MOTION ENDS --
>> 
>> The review period for this ballot shall commence at 2300 UTC on 29 January
>> 2016, and will close at 2300 UTC on 5 February 2016. Unless the motion is
>> withdrawn during the review period, the voting period will start
> immediately
>> thereafter and will close at 2300 UTC on 12 February 2016. Votes must be
>> cast by posting an on-list reply to this thread.
>> 
>> A vote in favor of the motion must indicate a clear 'yes' in the response.
> A
>> vote against must indicate a clear 'no' in the response. A vote to abstain
>> must indicate a clear 'abstain' in the response. Unclear responses will
> not
>> be counted. The latest vote received from any representative of a voting
>> member before the close of the voting period will be counted. Voting
>> members
>> are listed here:
>> http://scanmail.trustwave.com/?c=4062&d=iqOr1sTeCQWL_yk_oiQDsKAi9Ef
>> 9zT4-ZXWR
>> H8etcQ&s=5&u=https%3a%2f%2fcabforum%2eorg%2fmembers%2f
>> 
>> In order for the motion to be adopted, two thirds or more of the votes
> cast
>> by members in the CA category and greater than 50% of the votes cast by
>> members in the browser category must be in favor. Quorum is currently nine
>> (9) members– at least nine members must participate in the ballot, either
> by
>> voting in favor, voting against, or abstaining.
>> 
>> --
>> Sigbjørn Vik
>> Opera Software
>> _______________________________________________
>> Public mailing list
>> Public at cabforum.org
>> http://scanmail.trustwave.com/?c=4062&d=i6Or1uOCgbPYWa-
>> HlvVxWjR8SGmyKPjoIzO6
>> bb9XYw&s=5&u=https%3a%2f%2fcabforum%2eorg%2fmailman%2flistinfo%
>> 2fpublic
>> 
>> ________________________________
>> 
>> This transmission may contain information that is privileged,
> confidential,
>> and/or exempt from disclosure under applicable law. If you are not the
>> intended recipient, you are hereby notified that any disclosure, copying,
>> distribution, or use of the information contained herein (including any
>> reliance thereon) is strictly prohibited. If you received this
> transmission
>> in error, please immediately contact the sender and destroy the material
> in
>> its entirety, whether in electronic or hard copy format.
>> _______________________________________________
>> Public mailing list
>> Public at cabforum.org
>> https://cabforum.org/mailman/listinfo/public
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public