[Servercert-wg] Annual Update of CPS

Ben Wilson bwilson at mozilla.com
Tue Nov 15 16:01:04 UTC 2022


Hi Clint,
On second thought, maybe my mind has changed about this. I invite others to
chime in.
Ben

On Tue, Nov 15, 2022 at 7:16 AM Clint Wilson <clintw at apple.com> wrote:

> Hi Ben,
>
> Can you share more of your reasoning for picking 398 days and in general
> for decreasing the frequency of CP/CPS update requirements?
>
> Thanks!
> -Clint
>
> On Nov 14, 2022, at 4:38 PM, Ben Wilson via Servercert-wg <
> servercert-wg at cabforum.org> wrote:
>
> All,
> Section 2.3 of the Baseline Requirements currently says, "The CA SHALL
> develop, implement, enforce, and annually update a Certificate Policy
> and/or Certification Practice Statement that describes in detail how the
> CA implements the latest version of these Requirements."  I am considering
> a proposal to revise that language to specify a 398-day period.  See https://github.com/cabforum/servercert/issues/370#issuecomment-1113441809
>
> Possible language would be:
> "The CA SHALL develop, implement, enforce, and annually update a
> Certificate Policy and/or Certification Practice Statement that describes
> in detail how the CA implements the latest version of these Requirements.
> The CA SHALL indicate conformance with this requirement by incrementing the
> version number and adding a dated changelog entry *at least every 398
> days*, even if no other changes are made to the document."
> Thanks,
> Ben
>
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/servercert-wg
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20221115/15b51ba8/attachment.html>


More information about the Servercert-wg mailing list