[cabfpub] Pre-ballot on membership requirement update

[Dean Coclin]

With the tentative endorsements by Trend and Mozilla, the ballot reads as
follows:

 

Background:

Section 2.1 (a)(1) says that Issuing CAs "actively issue certificates to Web
servers."

 

Section 2.1(b) of the bylaws lists the items needed in a membership
application by CAs. 

But that section does not ask the CA applicant to provide a 3rd party
website where the CA/B Forum can validate that they are actively issuing
certs to web servers.  We do however ask the applicant this question, after
they have submitted their application. It would be helpful to have this in
the bylaws so we don't have to go back and ask every time.

 

Specific change:

 

Add under 2.1(b) 

(7) The URL of at least one third party website that is using includes a
certificate from issued by the Applicant CA which can be examined by Forum
members in the certificate chain.

 

Any other comments?

Dean

 

 

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On
Behalf Of Dean Coclin
Sent: Thursday, March 17, 2016 11:29 AM
To: CABFPub <public at cabforum.org>
Subject: [cabfpub] Pre-ballot on membership requirement update

 

I am looking for 2 endorsers for the following:

 

Background:

Section 2.1 (a)(1) says that Issuing CAs "actively issue certificates to Web
servers."

 

Section 2.1(b) of the bylaws lists the items needed in a membership
application by CAs. 

But that section does not ask the CA applicant to provide a 3rd party
website where the CA/B Forum can validate that they are actively issuing
certs to web servers.  We do however ask the applicant this question, after
they have submitted their application. It would be helpful to have this in
the bylaws so we don't have to go back and ask every time.

 

Specific change:

 

Add under 2.1(b) 

(7) The URL of at least one third party website that is using includes a
certificate from issued by the Applicant CA which can be examined by Forum
members in the certificate chain.

 

Thanks,
Dean

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20160318/d01c0963/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5747 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20160318/d01c0963/attachment.bin