[Servercert-wg] Ballot SC38 - Alignment of Record Archival

Dimitris Zacharopoulos (HARICA) dzacharo at harica.gr
Wed Dec 16 08:31:25 UTC 2020



On 15/12/2020 6:42 μ.μ., Ryan Sleevi via Servercert-wg wrote:
> I realize this might sound like an argument for RA audits (which 
> WebTrust provides, while ETSI... doesn't)

This was first discussed in Cupertino.
- 
https://cabforum.org/2019/05/03/minutes-for-ca-browser-forum-f2f-meeting-46-cupertino-12-14-march-2019/#WebTrust-for-RAs

ETSI supports RA audits which are practically scoped audits based on 
ETSI EN 319 401, 411-1, 411-2.

The way ETSI documents are structured, tagging the requirements per 
function, it is possible to have such audits only for RAs. This is not 
the first time you encounter this, so I might be missing something in 
your statement that "ETSI... doesn't".


Dimitris.


More information about the Servercert-wg mailing list