[cabfpub] [EXTERNAL] Bylaw interpretation: root store membership required?

[Ryan Sleevi]

There are specific terms in the Baseline Requirements that describe various
relationships, and I'm not sure how to map what you describe on to them. It
appears to be related to the Delegated Third Party discussion, and you're
suggesting Delegated Third Parties - even if nominally called CAs - should
not be able to vote/participate. Is that correct?

On Tue, Apr 11, 2017 at 7:07 PM, Kirk Hall <Kirk.Hall at entrustdatacard.com>
wrote:

> Renting was a short hand way of saying some members may not own a trusted
> root.  They may have the contractual right to use an issuing subroot of a
> trusted root owned by another CA – whether they are hosting the issuing
> subroot themselves or the issuing subroot is hosted for them by the CA that
> owns the root, or by others.
>
>
>
> Whether or not they “own” the issuing subroot, or just have a limited
> ability to use the subroot for a limited time (hence, “rent”) may vary from
> case to case.
>
>
>
> That’s the language we need to work on if we want to amend the Bylaws on
> qualifications for CA members.
>
>
>
> *From:* Ryan Sleevi [mailto:sleevi at google.com]
> *Sent:* Tuesday, April 11, 2017 9:38 AM
> *To:* CA/Browser Forum Public Discussion List <public at cabforum.org>
> *Cc:* Kirk Hall <Kirk.Hall at entrustdatacard.com>
> *Subject:* Re: [cabfpub] [EXTERNAL] Bylaw interpretation: root store
> membership required?
>
>
>
> Can you describe what "renting" a root entails? How is it objectively
> quantified as distinct from "own or control"?
>
>
>
> I would presume, for example, that anyone "renting" a root (the first time
> I have heard of such claim) would be able to demonstrate "control" for the
> duration of the rental, much as I would be able to demonstrate control of a
> vehicle that I was renting and driving.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170411/e7c030c9/attachment-0003.html>