[cabfpub] New draft of BR WebTrust audit criteria for review

Kirk Hall Kirk.Hall at entrustdatacard.com
Tue Jan 31 23:03:42 UTC 2017


CPA Canada has released a new draft of its WebTrust Principles and Criteria for Certification Authorities - SSL Baseline with Network Security, Version 2.2.  See attached.  Jeff Ward, our WebTrust delegate, will respond to any comments or questions.
Jeff Ward has invited comments on this new draft.  Please note that it addresses the recent Ballots 80 and 181 at pages 34 as follows:

3.2.2.4


7 January 2017


Baseline Requirements v1.3.8 replaced the entirety of the domain validation requirements in this section with new requirements. These were subsequently amended again in v1.4.2.



For certificates issued on or before 6 January 2017, the auditor is directed to consider the domain validation requirements in Section 3.2.2.4 of Baseline Requirements v1.3.6.



For certificates issued on or after 7 January 2017, the auditor is directed to consider the domain validation requirements in Section 3.2.2.4 of Baseline Requirements v1.4.2.



NOTE: Additional amendments to Section 3.2.2.4 are likely in 2017 and the auditor is encouraged to check subsequent versions of the Baseline Requirements and the effective dates of any amendments to this section.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/public/attachments/20170131/d98259c3/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: WTBR2_2 DRAFT TO CABF.PDF
Type: application/pdf
Size: 481394 bytes
Desc: WTBR2_2 DRAFT TO CABF.PDF
URL: <http://cabforum.org/pipermail/public/attachments/20170131/d98259c3/attachment-0001.pdf>


More information about the Public mailing list