[cabfpub] Allowing SHA-1 OCSP and CRL signatures past 2016

Ryan Sleevi sleevi at google.com
Wed Oct 26 16:33:24 UTC 2016


Reposting to public, somehow lost.

On Oct 26, 2016 9:32 AM, "Ryan Sleevi" <sleevi at google.com> wrote:

> On Oct 26, 2016 9:06 AM, "Jeremy Rowley" <jeremy.rowley at digicert.com>
> wrote:
> >
> > It’s called a “CAB Forum Draft Guideline” and would follow the procedure
> already established by the existing blaws and IPR. Following adoption, the
> chair would initiate a review period.
> >
>
> Which for a draft is 60 days, which gets back to the same problem, does it
> not?
>
> If it's a draft, then what is the point or purpose of the Ballot, versus
> say a straw poll. The draft would have to be adopted per our bylaws and
> IPR, so that's 60 days and a vote.
>
> Is the suggestion that we need to ballot changes to Drafts? Is that
> required by the  bylaws? My understanding was that the first ballot does
> not trigger until adopting the draft. So if we had a ballot, the result of
> the ballot is not a binding document, just a sense of whether the actual
> adoption would succeed.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20161026/e6b455ff/attachment-0003.html>


More information about the Public mailing list