[Servercert-wg] Voting Period begins for Ballot SC50: Remove the requirements of 4.1.1

Dimitris Zacharopoulos (HARICA) dzacharo at harica.gr
Thu Nov 11 18:46:24 UTC 2021


HARICA votes "yes" to ballot SC50.


On 11/11/2021 7:01 μ.μ., Clint Wilson via Servercert-wg wrote:
> This email begins the Voting period for Ballot SC50: Remove the 
> requirements of 4.1.1
>
> BALLOT SC50: Remove the requirements of 4.1.1
>
> PURPOSE OF BALLOT
>
> When attempting to reduce the retention period required for audit logs 
> and data archives, the NetSec Subcommittee also identified gaps in 
> which data a CA is required to retain which make it somewhat difficult 
> to make the desired adjustments to retention period. Specifically, a 
> CA is currently required to retain, but not use, data as defined in 
> 4.1.1 of the BRs.
> While reviewing the intent, purpose, and real-world usage around 
> section 4.1.1, it became apparent that there’s little value in 
> requiring CAs to maintain a database for which there is no prescribed 
> purpose or required action. This ballot seeks to address this gap by 
> replacing section 4.1.1 with "No stipulation." as is appropriate based 
> on current expectations here.
>
> The following motion has been proposed by Clint Wilson of Apple and 
> endorsed by Trevoli Ponds-White of Amazon and Dustin Hollenback of 
> Microsoft.
>
> -----Motion Begins-----
>
> This ballot modifies the “Baseline Requirements for the Issuance and 
> Management of Publicly-Trusted Certificates” as defined in the 
> following redline, based on Version 1.8.0:
>
> https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94
>
> -----Motion Ends-----
>
> This ballot proposes a Final Maintenance Guideline. The procedure for 
> approval of this ballot is as follows:
>
> Discussion (7+ days)
>
> Start Time: October 28 16:00 UTC
> End Time: November 4 16:00 UTC
>
> Vote for approval (7 days)
>
> Start Time: November 11 17:00 UTC
> End Time: November 18 17:00 UTC
>
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/servercert-wg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211111/ed5c95a4/attachment-0001.html>


More information about the Servercert-wg mailing list