[Servercert-wg] Voting begins: Ballot SC15 version 2: Remove Validation Method Number 9

[García Jimeno, Oscar]

Izenpe votes YES Ballot SC15 version 2

.eus gara !
horregatik orain nire helbide elektronikoa da:
por eso mi dirección de correo electrónico ahora es:  o-garcia at izenpe.eus<mailto:o-garcia at izenpe.eus>

Oscar García
CISSP, CISM

[Descripción: firma_email_Izenpe_eus]



ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!
ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.


[cid:image001.png at 01D2DDEC.B8FB6830]

De: Servercert-wg [mailto:servercert-wg-bounces at cabforum.org] En nombre de Doug Beattie via Servercert-wg
Enviado el: martes, 29 de enero de 2019 22:26
Para: CA/B Forum Server Certificate WG Public Discussion List
Asunto: [Servercert-wg] Voting begins: Ballot SC15 version 2: Remove Validation Method Number 9


Corrected discussion and Voting period dates

Ballot SC15 version 2: Remove Validation Method Number 9

Purpose of Ballot:  Method 9, Test Certificate, is insecure when web hosting platforms use a single IP address for more than one Domain Name, so this method must not be used.

The following motion has been proposed by Doug Beattie of GlobalSign and endorsed by Bruce Morton of Entrust Datacard and Ryan Sleevi of Google.

--- MOTION BEGINS ---
This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” as follows, based on Version 1.6.2:

Replace the content of section 3.2.2.4.9 with:

This method has been retired and MUST NOT be used. Prior validations using this method and validation data gathered according to this method SHALL NOT be used to issue certificates.


--- MOTION ENDS ---

*** WARNING ***: USE AT YOUR OWN RISK.  THE REDLINE BELOW IS NOT THE OFFICIAL VERSION OF THE CHANGES (CABF Bylaws, Section 2.4(a)):

A comparison of the changes can be found at: https://github.com/dougbeattie/documents/compare/master...dougbeattie:SC15---Remove-Method-9


The procedure for approval of this ballot is as follows:

Discussion (7+ days)

Start Time: 2019-01-22 08:15 Eastern

End Time: 2019-01-29 08:15 Eastern

Vote for approval (7 days)

Start Time: 2019-01-29 15:00 Eastern

End Time: 2019-02-05 15:00 Eastern

End Time: TBD



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190130/b67a3182/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 9540 bytes
Desc: image001.jpg
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190130/b67a3182/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 23964 bytes
Desc: image002.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190130/b67a3182/attachment-0001.png>