[Servercert-wg] Missing ballot (and EVG revision) from the CABF website?

Jos Purvis (jopurvis) jopurvis at cisco.com
Wed Jun 10 12:13:35 MST 2020

I would recommend just a note on the EVG page indicating that due to an oversight, v1.5.3 wasn’t published properly and was superseded by 1.5.4 (and completely adopted by the go-forward re-adoption ballot). If anyone happens to have a copy of v1.5.3 lying around, it’d be easy to republish, but since we don’t need it for anything, reconstructing it is probably more effort than it’s worth at this point. 


Jos Purvis (jopurvis at cisco.com)
.:|:.:|:. cisco systems | Cryptographic Services
PGP: 0xFD802FEE07D19105 | Controls and Trust Verification



From: Ryan Sleevi <sleevi at google.com>
Date: Wednesday, June 10, 2020 at 3:06 PM
To: CABF Server Cert WG <servercert-wg at cabforum.org>
Cc: Dean Coclin <dean.coclin at digicert.com>, "Jos Purvis (jopurvis)" <jopurvis at cisco.com>, "Dimitris Zacharopoulos (HARICA)" <dzacharo at harica.gr>, Wayne Thayer <wthayer at gmail.com>
Subject: Missing ballot (and EVG revision) from the CABF website?


When looking at https://cabforum.org/extended-validation/ , I don't see an EVG 1.5.3


Yet if you look at the changelog history, you'll see EVG 1.5.3 was associated with Ballot 144, which was voted on in 2015-02 (see https://oldportal.cabforum.org/pipermail/public/2015-February/thread.html ) and as documented on our webpage https://cabforum.org/2015/02/18/ballot-144-validation-rules-dot-onion-names/


Ben had proposed Redlines (EVGs https://oldportal.cabforum.org/pipermail/public/2015-February/005091.html and BRGs https://oldportal.cabforum.org/pipermail/public/2015-February/005093.html ), and we'd posted v1.2.4 of the BRs that resulted from Ballot 144 at https://cabforum.org/baseline-requirements-documents/ , but I'm not seeing an EVG 1.5.3


I looked through the mail archives and this was during the period where review notices weren't being sent, so I didn't find any review notice with the document. I also didn't find a final copy of the document, beyond that thread above.


Not trying to pick at old issues, since we largely resolved these with the "readoption" ballot on a go-forward, but should we try to create a v1.5.3 for the website? Or just add a note that due to an oversight, it wasn't published, but refer to Ballot 144 for the text?


Also apologies if I overlooked something blindingly obvious :)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20200610/46667454/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3699 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20200610/46667454/attachment-0001.p7s>

More information about the Servercert-wg mailing list