[Servercert-wg] Ballot SC23: Precertificates

Wayne Thayer wthayer at mozilla.com
Tue Oct 22 18:12:19 MST 2019


On Tue, Oct 22, 2019 at 6:00 PM Kirk Hall <Kirk.Hall at entrustdatacard.com>
wrote:

> Wayne – I failed to look closely at your proposed text on Ballot SC23, and
> now realize you reverted to some earlier language that is easier to
> understand – sorry I didn’t notice that.
>
>
>

I'd still like to know if there is a preference for Dimitris' language, but
this leads me to think that I should go ahead with the existing ballot.

There are no ballot provisions setting an Effective Date for the ballot –
> does that mean the requirement that all CAs must provide OCSP responses for
> pre-certificates will take effect 30 days after the end of the voting
> period?  That would be problematic.
>
>
>
> Bruce previously asked for the ballot to include an Effective Date that is
> six months after completion of the IP review period so that CAs can plan
> for and modify their systems.  Would you be willing to add that to the
> ballot to make it more widely supported?  We’ve all been doing CT for many
> years with many CAs not providing OCSP responses on pre-certificates, and
> there does not seem to be a crisis requiring the new provision to be
> applied in 30 days.
>
>
>
> Thanks for pointing that out. I intended to propose an effective date of
1-March 2020, if Jeremy and Rob as endorsers will accept this amendment?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20191022/3e86bb87/attachment.html>


More information about the Servercert-wg mailing list