[Servercert-wg] Voting begins: Ballot SC15 version 2: Remove Validation Method Number 9
Christopher Kemmerer
chris at ssl.com
Tue Feb 5 11:49:32 MST 2019
SSL.com votes YES on Ballot SC15 version 2.
Regards,
csk
On 1/29/2019 3:26 PM, Doug Beattie via Servercert-wg wrote:
>
> *Corrected discussion and Voting period dates*
>
> Ballot SC15 version 2: Remove Validation Method Number 9
>
> Purpose of Ballot: Method 9, Test Certificate, is insecure when web
> hosting platforms use a single IP address for more than one Domain
> Name, so this method must not be used.
>
> The following motion has been proposed by Doug Beattie of GlobalSign
> and endorsed by Bruce Morton of Entrust Datacard and Ryan Sleevi of
> Google.
>
> --- MOTION BEGINS ---
>
> This ballot modifies the “Baseline Requirements for the Issuance and
> Management of Publicly-Trusted Certificates” as follows, based on
> Version 1.6.2:
>
> Replace the content of section 3.2.2.4.9 with:
>
> This method has been retired and MUST NOT be used. Prior validations
> using this method and validation data gathered according to this
> method SHALL NOT be used to issue certificates.
>
> --- MOTION ENDS ---
>
> *** WARNING ***: USE AT YOUR OWN RISK. THE REDLINE BELOW IS NOT THE
> OFFICIAL VERSION OF THE CHANGES (CABF Bylaws, Section 2.4(a)):
>
> A comparison of the changes can be found at:
> https://github.com/dougbeattie/documents/compare/master...dougbeattie:SC15---Remove-Method-9
>
>
> The procedure for approval of this ballot is as follows:
>
> Discussion (7+ days)
>
> Start Time: 2019-01-22 08:15 Eastern
>
> End Time: 2019-01-29 08:15 Eastern
>
> Vote for approval (7 days)
>
> Start Time: 2019-01-29 15:00 Eastern
>
> End Time: 2019-02-05 15:00 Eastern
>
> End Time: TBD
>
>
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> http://cabforum.org/mailman/listinfo/servercert-wg
--
Chris Kemmerer
Manager of Operations
SSL.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~ To find the reefs, look~~~~~~~~
~~~~ for the wrecks. ~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190205/8dfcb66f/attachment.html>
More information about the Servercert-wg
mailing list