[Servercert-wg] SC-59 Weak Key Guidance - Move to Vote

[Tom Zermeno]

After consideration and consultation via the SCWG mailing list, we have
decided to move forward with the Weak Keys Guidance Ballot (SC-59) as is,
save for the effective date.   

We believe that the requested date of November 15, 2023, will allow enough
time for Certificate Authorities to enact any changes to their systems to
ensure that they perform the weak key checks on all CSRs submitted for TLS
certificates. As such, we would like to move the ballot to the voting stage.


- Motion Begins -  

This ballot modifies the "Baseline Requirements for the Issuance and
Management of Publicly-Trusted Certificates" ("Baseline Requirements"),
based on Version 2.0.0. 

Notes: Upon beginning discussion for SC-59, the then-current version of the
BRs was 1.8.4; since that time several ballots have been approved, leading
to the increment of the version to 1.8.7 and eventually 2.0.0, which is the
latest approved version of the BRs.  The changes introduced in SC-59 do not
conflict with any of the recent ballots. As observed with other ballots in
the past, minor administrative updates must be made to the proposed ballot
text before publication such that the appropriate Version # and Change
History are accurately represented (e.g., to indicate these changes will be
represented in Version 2.0.1).  

  

MODIFY the Baseline Requirements as specified in the following Redline:
<https://github.com/cabforum/servercert/compare/a0360b61e73476959220dc328e3b
68d0224fa0b3...SSLcom:servercert:958e6ccac857b826fead6e4bd06d58f4fdd7fa7a>
https://github.com/cabforum/servercert/compare/a0360b61e73476959220dc328e3b6
8d0224fa0b3...SSLcom:servercert:958e6ccac857b826fead6e4bd06d58f4fdd7fa7a  

- Motion Ends - 

Vote for approval (7 days) 

    Start Time:  2023-06-22 18:00 UTC  

    End Time:   2023-06-29 18:00 UTC 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20230621/cd614b3c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6868 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20230621/cd614b3c/attachment.p7s>