[cabfpub] Four sets of changes for proposed ballots

Tim Shirley TShirley at trustwave.com
Thu Jun 22 01:50:22 MST 2017


On the ASN.1 change, there’s a pervasive typo between line 1707 and 1733 of “id-evat-jursidiction” rather than “id-evat-jurisdiction” (10 instances in all).  Otherwise, looks good to me.

From: Public <public-bounces at cabforum.org> on behalf of CABFPub <public at cabforum.org>
Reply-To: CABFPub <public at cabforum.org>
Date: Sunday, June 18, 2017 at 5:52 PM
To: CABFPub <public at cabforum.org>
Cc: "pzb at amzn.com" <pzb at amzn.com>
Subject: [cabfpub] Four sets of changes for proposed ballots

I’ve promised a bunch of people to propose changes and fell rather behind.  So now I’ve got four sets of changes that need review for possible ballots:

https://github.com/cabforum/documents/compare/master...pzb:dnqualifier?expand=1<https://scanmail.trustwave.com/?c=4062&d=5fbG2TDF2qtBmAdXCVLnlvT33gN9b4Efm1xHgIDjyw&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2fmaster%2e%2e%2epzb%3adnqualifier%3fexpand%3d1> adds dnQualifier as an allowed attribute for all certificate types (including DV)

https://github.com/cabforum/documents/compare/master...pzb:evj-asn?expand=1<https://scanmail.trustwave.com/?c=4062&d=5fbG2TDF2qtBmAdXCVLnlvT33gN9b4Efm10R09DkzA&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2fmaster%2e%2e%2epzb%3aevj-asn%3fexpand%3d1> adds ASN.1 info on the EV jurisdiction attribute types

https://github.com/cabforum/documents/compare/master...pzb:ev-liability?expand=1<https://scanmail.trustwave.com/?c=4062&d=5fbG2TDF2qtBmAdXCVLnlvT33gN9b4EfmwcU0tWyng&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2fmaster%2e%2e%2epzb%3aev-liability%3fexpand%3d1> adds language to the EV guidelines to clarify that CAs may limit their aggregate liabilities

https://github.com/cabforum/documents/compare/master...pzb:underscores?expand=1<https://scanmail.trustwave.com/?c=4062&d=5fbG2TDF2qtBmAdXCVLnlvT33gN9b4Efm1UQhte2ng&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fdocuments%2fcompare%2fmaster%2e%2e%2epzb%3aunderscores%3fexpand%3d1> allows underscores in domain names and clarifies what can go in common names.  This builds on Ben Wilson’s draft (thanks Ben!)

I still need to update the proposal to add SRVname as an allowed type of subject alternative name.  This will be a separate ballot.

I would appreciate feedback on any or all of these.

Thanks,
Peter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/public/attachments/20170622/f0b09dd9/attachment.html>


More information about the Public mailing list