[Servercert-wg] Voting Ends Tomorrow: Ballot SC15 version 2: Remove Validation Method Number 9

Moudrick M. Dadashov md at ssc.lt
Tue Feb 5 01:19:09 MST 2019


SSC votes: "Yes".

Thanks,
M.D.

On 2/4/2019 5:18 PM, Wayne Thayer via Servercert-wg wrote:
> Reminder: Voting ends Tuesday 2019-02-05 15:00 Eastern on ballot SC15 
> version 2: Remove Validation Method Number 9
>
> On Tue, Jan 29, 2019 at 2:26 PM Doug Beattie via Servercert-wg 
> <servercert-wg at cabforum.org <mailto:servercert-wg at cabforum.org>> wrote:
>
>     *Corrected discussion and Voting period dates*
>
>     Ballot SC15 version 2: Remove Validation Method Number 9
>
>     Purpose of Ballot:  Method 9, Test Certificate, is insecure when
>     web hosting platforms use a single IP address for more than one
>     Domain Name, so this method must not be used.
>
>     The following motion has been proposed by Doug Beattie of
>     GlobalSign and endorsed by Bruce Morton of Entrust Datacard and
>     Ryan Sleevi of Google.
>
>     --- MOTION BEGINS ---
>
>     This ballot modifies the “Baseline Requirements for the Issuance
>     and Management of Publicly-Trusted Certificates” as follows, based
>     on Version 1.6.2:
>
>     Replace the content of section 3.2.2.4.9 with:
>
>     This method has been retired and MUST NOT be used. Prior
>     validations using this method and validation data gathered
>     according to this method SHALL NOT be used to issue certificates.
>
>     --- MOTION ENDS ---
>
>     *** WARNING ***: USE AT YOUR OWN RISK.  THE REDLINE BELOW IS NOT
>     THE OFFICIAL VERSION OF THE CHANGES (CABF Bylaws, Section 2.4(a)):
>
>     A comparison of the changes can be found at:
>     https://github.com/dougbeattie/documents/compare/master...dougbeattie:SC15---Remove-Method-9
>
>
>     The procedure for approval of this ballot is as follows:
>
>     Discussion (7+ days)
>
>     Start Time: 2019-01-22 08:15 Eastern
>
>     End Time: 2019-01-29 08:15 Eastern
>
>     Vote for approval (7 days)
>
>     Start Time: 2019-01-29 15:00 Eastern
>
>     End Time: 2019-02-05 15:00 Eastern
>
>     End Time: TBD
>
>     _______________________________________________
>     Servercert-wg mailing list
>     Servercert-wg at cabforum.org <mailto:Servercert-wg at cabforum.org>
>     http://cabforum.org/mailman/listinfo/servercert-wg
>
>
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> http://cabforum.org/mailman/listinfo/servercert-wg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190205/359d7dd4/attachment.html>


More information about the Servercert-wg mailing list