[Servercert-wg] VOTING Period Begins - Ballot SC-077: Update WebTrust Audit name in Section 8.4 and References

Inigo Barreira Inigo.Barreira at sectigo.com
Mon Aug 26 12:58:23 UTC 2024


Hi there,

 

I can´t count this vote because you´re not listed as a server cert voting representative, only for S/MIME and Forum ballots. I think it could be an error and can be fixed quickly but unfortunately can´t count this vote. Sorry for that.

 

Regards

 

De: Servercert-wg <servercert-wg-bounces at cabforum.org> En nombre de ??? via Servercert-wg
Enviado el: martes, 20 de agosto de 2024 3:25
Para: Clint Wilson <clintw at apple.com>; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg at cabforum.org>
Asunto: Re: [Servercert-wg] VOTING Period Begins - Ballot SC-077: Update WebTrust Audit name in Section 8.4 and References

 

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

 

CFCA votes Yes to SC-077.





-----原始邮件-----
发件人: "Clint Wilson via Servercert-wg" <servercert-wg at cabforum.org <mailto:servercert-wg at cabforum.org> >
发送时间: 2024-08-14 01:05:00 (星期三)
收件人: "ServerCert CA/BF" <servercert-wg at cabforum.org <mailto:servercert-wg at cabforum.org> >
主题: [Servercert-wg] VOTING Period Begins - Ballot SC-077: Update WebTrust Audit name in Section 8.4 and References


Purpose of Ballot 


CPA Canada has separated the audit criteria which map to the Network and Certificate System Security Requirements (NCSSRs) from the audit criteria which map to the TLS Baseline Requirements (TBRs). As a result, the requirements in Section 8.4 are out of date for audits which use the updated/separated audit criteria. However, we also need to ensure the combined audit criteria are able to be used until fully deprecated by CPA Canada and/or Root Programs stop accepting them. 

This ballot modifies Section 8.4 to allow for a CA to be audited against either: 

*	WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security; or 
*	WebTrust Principles and Criteria for Certification Authorities – SSL Baseline AND WebTrust Principles and Criteria for Certification Authorities – Network Security 


Motion 


The following motion has been proposed by Clint Wilson (Apple) and endorsed by Dimitris Zacharopoulos (HARICA) and Trevoli Ponds-White (Amazon)

You can view and comment on the Github pull request representing this ballot here <https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fcabforum%2Fservercert%2Fpull%2F514%2Ffiles&data=05%7C02%7Cinigo.barreira%40sectigo.com%7Ca1ff0a5291ce42ea874608dcc0b6def1%7C0e9c48946caa465d96604b6968b49fb7%7C0%7C0%7C638597138871712177%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=i6PT3JozPR3PsqeoYenB2jXppqn9x9xjW9S0gD9HUac%3D&reserved=0> .  


Motion Begins 


MODIFY the "Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates" ("TLS Baseline Requirements") based on Version 2.0.5 as specified in the following redline: 

*	https://github.com/cabforum/servercert/compare/20af1b271f2b689344ae353d3e78dc6b772199db...a9d3e3b6e514cf8b4d44ace625a447108c04a91c 


Motion Ends 


This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows: 


Discussion (at least 7 days) 


*	Start time: August 6, 2024 17:00 UTC
*	End time: on or after August 13, 2024 17:00 UTC


Vote for approval (7 days) 


*	Start time: August 13, 2024 17:00 UTC 
*	End time: August 20, 2024 17:00 UTC 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240826/68442188/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6630 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240826/68442188/attachment-0001.p7s>


More information about the Servercert-wg mailing list