[Servercert-wg] Voting begins: Ballot SC15 version 2: Remove Validation Method Number 9

[Tim Hollebeek]

DigiCert votes YES on SC15 version 2.

 

-Tim

 

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Doug
Beattie via Servercert-wg
Sent: Tuesday, January 29, 2019 4:26 PM
To: CA/B Forum Server Certificate WG Public Discussion List
<servercert-wg at cabforum.org>
Subject: [Servercert-wg] Voting begins: Ballot SC15 version 2: Remove
Validation Method Number 9

 

 

Corrected discussion and Voting period dates

 

Ballot SC15 version 2: Remove Validation Method Number 9

 

Purpose of Ballot:  Method 9, Test Certificate, is insecure when web hosting
platforms use a single IP address for more than one Domain Name, so this
method must not be used.

 

The following motion has been proposed by Doug Beattie of GlobalSign and
endorsed by Bruce Morton of Entrust Datacard and Ryan Sleevi of Google.

 

--- MOTION BEGINS ---

This ballot modifies the "Baseline Requirements for the Issuance and
Management of Publicly-Trusted Certificates" as follows, based on Version
1.6.2:

 

Replace the content of section 3.2.2.4.9 with:

 

This method has been retired and MUST NOT be used. Prior validations using
this method and validation data gathered according to this method SHALL NOT
be used to issue certificates.

 

 

--- MOTION ENDS ---

 

*** WARNING ***: USE AT YOUR OWN RISK.  THE REDLINE BELOW IS NOT THE
OFFICIAL VERSION OF THE CHANGES (CABF Bylaws, Section 2.4(a)):

 

A comparison of the changes can be found at:
https://github.com/dougbeattie/documents/compare/master...dougbeattie:SC15--
-Remove-Method-9 

 

 

The procedure for approval of this ballot is as follows:

 

Discussion (7+ days)

 

Start Time: 2019-01-22 08:15 Eastern

 

End Time: 2019-01-29 08:15 Eastern

 

Vote for approval (7 days)

 

Start Time: 2019-01-29 15:00 Eastern

 

End Time: 2019-02-05 15:00 Eastern

 

End Time: TBD

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190130/3d1cb047/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190130/3d1cb047/attachment.p7s>