[Servercert-wg] Discussion Period Begins: Ballot SC-061v4: New CRL Entries must have a Revocation Reason Code

[Inigo Barreira]

Sorry but the voting period has not started yet. We´re still in discussion
period.



Regards



De: Servercert-wg <servercert-wg-bounces at cabforum.org> En nombre de
lv_hui--- via Servercert-wg
Enviado el: lunes, 13 de febrero de 2023 3:01
Para: bwilson <bwilson at mozilla.com>; CA/B Forum Server Certificate WG Public
Discussion List <servercert-wg at cabforum.org>
Asunto: Re: [Servercert-wg] Discussion Period Begins: Ballot SC-061v4: New
CRL Entries must have a Revocation Reason Code



CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know the
content is safe.



iTrusChina votes “Yes” on Ballot SC-061 v.4



  _____

lv_hui at itrus.cn <mailto:lv_hui at itrus.cn>



From: Ben Wilson via Servercert-wg <mailto:servercert-wg at cabforum.org>

Date: 2023-02-08 11:06

To: CA/B Forum Server Certificate WG Public Discussion List
<mailto:servercert-wg at cabforum.org>

Subject: [Servercert-wg] Discussion Period Begins: Ballot SC-061v4: New CRL
Entries must have a Revocation Reason Code

All,

This is version 4 of Ballot SC-061. This version uses the following language
in section 7.2.2 “superseded (RFC 5280 CRLReason #4): Indicates that the
Certificate is being replaced because: the Subscriber has requested a new
Certificate, the CA has reasonable evidence that the validation of domain
authorization or control for any fully‐qualified domain name or IP address
in the Certificate should not be relied upon, or the CA has revoked the
Certificate for compliance reasons such as the Certificate does not comply
with these Baseline Requirements or the CA's CP or CPS;”

Purpose of Ballot SC-061 v.4

The purpose of this ballot is to modify sections 4.9.1.1 and 7.2.2 of the
Baseline Requirements to incorporate the CRL reason codes that Mozilla has
adopted in section 6.1.1 of the Mozilla Root Store Policy.

Motion

The following motion has been proposed by Ben Wilson of Mozilla and endorsed
by David Kluge of Google Trust Services and Kiran Tummala of Microsoft.

--Motion Begins--

This ballot modifies sections 4.9.1.1 and 7.2.2 of the “Baseline
Requirements for the Issuance and Management of Publicly-Trusted
Certificates” as defined in the following redline, based on Version 1.8.6:

https://github.com/cabforum/servercert/compare/e87bc5fcf35f533e58899311e538e
6ffe959102e
<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.co
m%2Fcabforum%2Fservercert%2Fcompare%2Fe87bc5fcf35f533e58899311e538e6ffe95910
2e&data=05%7C01%7Cinigo.barreira%40sectigo.com%7C4e3086cfc8da485d6b5008db0d6
62c49%7C0e9c48946caa465d96604b6968b49fb7%7C0%7C0%7C638118504731075941%7CUnkn
own%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVC
I6Mn0%3D%7C3000%7C%7C%7C&sdata=lcYoI8y%2FpZqrp1yfQL39eTwi%2FE%2BMAL2LZ0YIE0O
TRW0%3D&reserved=0>

 --Motion Ends--



This ballot proposes a Final Maintenance Guideline. The procedure for
approval of this ballot is as follows:

Discussion (7+ days)

Start Time:  February 8, 2023 03:00 UTC

End Time: Not before February 15, 2023 03:00 UTC



Vote for approval (7 days)

Start Time:  TBD

End Time:  TBD

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20230213/5b24d489/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6853 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20230213/5b24d489/attachment-0001.p7s>