[Servercert-wg] Voting Begins on Ballot SC43 Version 2: Clarify Acceptable Status Codes

[Doug Beattie]

GlobalSign changes our vote to No based on the issue with the effective
date.

 

Doug

 

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Doug
Beattie via Servercert-wg
Sent: Thursday, April 1, 2021 1:06 PM
To: CA/B Forum Server Certificate WG Public Discussion List
<servercert-wg at cabforum.org>
Subject: Re: [Servercert-wg] Voting Begins on Ballot SC43 Version 2: Clarify
Acceptable Status Codes

 

GlobalSign votes Yes on ballot SC43 Version 2.

 

Doug

 

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Niko
Carpenter via Servercert-wg
Sent: Thursday, April 1, 2021 12:01 PM
To: CA/B Forum Server Certificate WG Public Discussion List
<servercert-wg at cabforum.org>
Subject: [Servercert-wg] Voting Begins on Ballot SC43 Version 2: Clarify
Acceptable Status Codes

 

Purpose of Ballot:

 

This ballot clarifies the allowed HTTP status codes used for following
redirects in domain validation methods 18 and 19, and specifies that the
target URI must come from the Location response header.

In Section 3.2.2.4.18 and 3.2.2.4.19, it replaces

"Redirects MUST be the result of an HTTP status code result within the 3xx
Redirection class of status codes, as defined in RFC 7231, Section 6.4."
with the following:

 

  * "Redirects MUST be the result of a 301, 302, 307, or 308 HTTP status
code response."

  * "Redirects MUST be to resource URLs contained in the Location HTTP
response header."

 

The following motion has been proposed by Niko Carpenter of SecureTrust and
endorsed by Corey Bonnell of DigiCert and Ryan Sleevi of Google.

 

--MOTION BEGINS--

 

This ballot modifies the "Baseline Requirements for the Issuance and
Management of Publicly-Trusted Certificates" as defined in the following
redline, based on Version 1.7.3:

 

 
<https://scanmail.trustwave.com/?c=4062&d=9LHc4Ck8YCR0KMOI3EcCF7H8pVIBPn0qiN
iZpinsag&s=5&u=https%3a%2f%2fgithub%2ecom%2fcabforum%2fservercert%2fcompare%
2f2b7720f7821764f0ea9d0d583ec5c61896a3f4cd%2e%2ebd7915249a0360a28fe37b785c36
7d70645c7e8f>
https://github.com/cabforum/servercert/compare/2b7720f7821764f0ea9d0d583ec5c
61896a3f4cd..bd7915249a0360a28fe37b785c367d70645c7e8f

 

--MOTION ENDS--

 

This ballot proposes a Final Maintenance Guideline.

 

The procedure for approval of this ballot is as follows:

 

Discussion (7+ days)

 

Start Time: 11-March 2021 21:30 UTC

 

End Time: 01-April 2021 16:00 UTC

 

Vote for approval (7 days)

 

Start Time: 01-April 2021 16:00 UTC

 

End Time: 08-April 2021 16:00 UTC 

 

Niko Carpenter 
Software Engineer

 
<http://scanmail.trustwave.com/?c=4062&d=9LHc4Ck8YCR0KMOI3EcCF7H8pVIBPn0qiIr
O8S3hag&s=5&u=http%3a%2f%2fwww%2esecuretrust%2ecom> www.securetrust.com



2020 Best PCI Compliance Provider Winner - Card Not Present Awards

This transmission may contain information that is privileged, confidential,
and/or exempt from disclosure under applicable law. If you are not the
intended recipient, you are hereby notified that any disclosure, copying,
distribution, or use of the information contained herein (including any
reliance thereon) is STRICTLY PROHIBITED. If you received this transmission
in error, please immediately contact the sender and destroy the material in
its entirety, whether in electronic or hard copy format. 

This transmission may contain information that is privileged, confidential,
and/or exempt from disclosure under applicable law. If you are not the
intended recipient, you are hereby notified that any disclosure, copying,
distribution, or use of the information contained herein (including any
reliance thereon) is STRICTLY PROHIBITED. If you received this transmission
in error, please immediately contact the sender and destroy the material in
its entirety, whether in electronic or hard copy format. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20210401/ef49ea29/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 8424 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20210401/ef49ea29/attachment-0001.p7s>