[Servercert-wg] Voting Period begins for Ballot SC50: Remove the requirements of 4.1.1

Joanna Fox joanna at trustcorsystems.com
Fri Nov 12 16:57:12 UTC 2021


TrustCor votes YES on SC50.

Joanna Fox
Head of Digital Certificate Compliance
https://www.trustcor.com
Joanna at trustcorsystems.com



> On Nov 11, 2021, at 10:01 AM, Clint Wilson via Servercert-wg <servercert-wg at cabforum.org> wrote:
> 
> This email begins the Voting period for Ballot SC50: Remove the requirements of 4.1.1
> 
> BALLOT SC50: Remove the requirements of 4.1.1
> 
> PURPOSE OF BALLOT
> 
> When attempting to reduce the retention period required for audit logs and data archives, the NetSec Subcommittee also identified gaps in which data a CA is required to retain which make it somewhat difficult to make the desired adjustments to retention period. Specifically, a CA is currently required to retain, but not use, data as defined in 4.1.1 of the BRs.
> While reviewing the intent, purpose, and real-world usage around section 4.1.1, it became apparent that there’s little value in requiring CAs to maintain a database for which there is no prescribed purpose or required action. This ballot seeks to address this gap by replacing section 4.1.1 with "No stipulation." as is appropriate based on current expectations here.
> 
> The following motion has been proposed by Clint Wilson of Apple and endorsed by Trevoli Ponds-White of Amazon and Dustin Hollenback of Microsoft.
> 
> -----Motion Begins-----
> 
> This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” as defined in the following redline, based on Version 1.8.0:
> 
> https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94 <https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94>
> 
> -----Motion Ends-----
> 
> This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:
> 
> Discussion (7+ days)
> 
> Start Time: October 28 16:00 UTC
> End Time: November 4 16:00 UTC
> 
> Vote for approval (7 days)
> 
> Start Time: November 11 17:00 UTC
> End Time: November 18 17:00 UTC
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/servercert-wg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211112/f2b8d285/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211112/f2b8d285/attachment-0001.sig>


More information about the Servercert-wg mailing list