[Servercert-wg] Servercert-wg Digest, Vol 41, Issue 4

Thu Nov 18 06:05:50 UTC 2021

Disig votes "YES" on BALLOT SC50: Remove the requirements of 4.1.1.

Regards
Peter Miskovic

-----Original Message-----
From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of servercert-wg-request at cabforum.org
Sent: Thursday, November 11, 2021 6:45 PM
To: servercert-wg at cabforum.org
Subject: Servercert-wg Digest, Vol 41, Issue 4

Send Servercert-wg mailing list submissions to
	servercert-wg at cabforum.org

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.cabforum.org/mailman/listinfo/servercert-wg
or, via email, send a message with subject or body 'help' to
	servercert-wg-request at cabforum.org

You can reach the person managing the list at
	servercert-wg-owner at cabforum.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Servercert-wg digest..."

Today's Topics:

   1. Voting Period begins for Ballot SC50: Remove the	requirements
      of 4.1.1 (Clint Wilson)
   2. Re: Voting Period begins for Ballot SC50: Remove	the
      requirements of 4.1.1 (Tim Hollebeek)

----------------------------------------------------------------------

Message: 1
Date: Thu, 11 Nov 2021 09:01:42 -0800
From: Clint Wilson <clintw at apple.com>
To: ServerCert CA/BF <servercert-wg at cabforum.org>
Subject: [Servercert-wg] Voting Period begins for Ballot SC50: Remove
	the	requirements of 4.1.1
Message-ID: <CAC70231-94B4-4E6D-9A41-0CF4316C1CF6 at apple.com>
Content-Type: text/plain; charset="utf-8"

This email begins the Voting period for Ballot SC50: Remove the requirements of 4.1.1

BALLOT SC50: Remove the requirements of 4.1.1

PURPOSE OF BALLOT

When attempting to reduce the retention period required for audit logs and data archives, the NetSec Subcommittee also identified gaps in which data a CA is required to retain which make it somewhat difficult to make the desired adjustments to retention period. Specifically, a CA is currently required to retain, but not use, data as defined in 4.1.1 of the BRs.
While reviewing the intent, purpose, and real-world usage around section 4.1.1, it became apparent that there?s little value in requiring CAs to maintain a database for which there is no prescribed purpose or required action. This ballot seeks to address this gap by replacing section 4.1.1 with "No stipulation." as is appropriate based on current expectations here.

The following motion has been proposed by Clint Wilson of Apple and endorsed by Trevoli Ponds-White of Amazon and Dustin Hollenback of Microsoft.

-----Motion Begins-----

This ballot modifies the ?Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates? as defined in the following redline, based on Version 1.8.0:

https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94 <https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94>

-----Motion Ends-----

This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:

Discussion (7+ days)

Start Time: October 28 16:00 UTC
End Time: November 4 16:00 UTC

Vote for approval (7 days)

Start Time: November 11 17:00 UTC
End Time: November 18 17:00 UTC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211111/15d553f6/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3621 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211111/15d553f6/attachment-0001.p7s>

------------------------------

Message: 2
Date: Thu, 11 Nov 2021 17:44:24 +0000
From: Tim Hollebeek <tim.hollebeek at digicert.com>
To: ServerCert CA/BF <servercert-wg at cabforum.org>, Clint Wilson
	<clintw at apple.com>
Subject: Re: [Servercert-wg] Voting Period begins for Ballot SC50:
	Remove	the	requirements of 4.1.1
Message-ID:
	<DM8PR14MB523768B2CB6AD7B6021BE97183949 at DM8PR14MB5237.namprd14.prod.outlook.com>

Content-Type: text/plain; charset="utf-8"

DigiCert votes YES on SC50.

-Tim

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Clint Wilson via Servercert-wg
Sent: Thursday, November 11, 2021 12:02 PM
To: ServerCert CA/BF <servercert-wg at cabforum.org>
Subject: [Servercert-wg] Voting Period begins for Ballot SC50: Remove the requirements of 4.1.1

This email begins the Voting period for Ballot SC50: Remove the requirements of 4.1.1

BALLOT SC50: Remove the requirements of 4.1.1

PURPOSE OF BALLOT

When attempting to reduce the retention period required for audit logs and data archives, the NetSec Subcommittee also identified gaps in which data a CA is required to retain which make it somewhat difficult to make the desired adjustments to retention period. Specifically, a CA is currently required to retain, but not use, data as defined in 4.1.1 of the BRs.
While reviewing the intent, purpose, and real-world usage around section 4.1.1, it became apparent that there?s little value in requiring CAs to maintain a database for which there is no prescribed purpose or required action. This ballot seeks to address this gap by replacing section 4.1.1 with "No stipulation." as is appropriate based on current expectations here.

The following motion has been proposed by Clint Wilson of Apple and endorsed by Trevoli Ponds-White of Amazon and Dustin Hollenback of Microsoft.

-----Motion Begins-----

This ballot modifies the ?Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates? as defined in the following redline, based on Version 1.8.0:

 <https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94> https://github.com/cabforum/servercert/compare/cda0f92ee70121fd5d692685b97ebb6669c74fb7..8b2681c3f93bbc9fbe83ab9d67999629db630e94

-----Motion Ends-----

This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:

Discussion (7+ days)

Start Time: October 28 16:00 UTC
End Time: November 4 16:00 UTC

Vote for approval (7 days)

Start Time: November 11 17:00 UTC
End Time: November 18 17:00 UTC

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211111/6580d7c6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20211111/6580d7c6/attachment.p7s>

------------------------------

Subject: Digest Footer

_______________________________________________
Servercert-wg mailing list
Servercert-wg at cabforum.org
https://lists.cabforum.org/mailman/listinfo/servercert-wg

------------------------------

End of Servercert-wg Digest, Vol 41, Issue 4
********************************************