[Servercert-wg] [EXTERNAL]- Ballot SC-68: Allow VATEL and VATXI for organizationIdentifier

Tue Jan 16 20:25:55 UTC 2024

Right.  We do not want to allow blanket or undisclosed exceptions to the CA/Browser Forum rules, so a generic carve out would do more harm than good.  If anyone is aware of local laws that are a challenge for BR compliance, they SHOULD, and in some cases, MUST, bring them to the attention of the Forum so we can take appropriate action.

-Tim

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Dimitris Zacharopoulos (HARICA) via Servercert-wg
Sent: Tuesday, January 16, 2024 4:19 AM
To: Pedro FUENTES <pfuentes at wisekey.com>; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg at cabforum.org>
Subject: Re: [Servercert-wg] [EXTERNAL]- Ballot SC-68: Allow VATEL and VATXI for organizationIdentifier

On 16/1/2024 10:17 π.μ., Pedro FUENTES wrote:

I just wonder if this change could have been made in a more generic way, so it could be applied in other similar cases, where there’s a conflict between the BR and the applicable laws.

It cannot, because for those "unknown" (to the CA/B Forum) cases, the provisions of 9.16.3 of the BRs or 8.1 of EVG must be followed.

Dimitris.

On 16 Jan 2024, at 09:07, Dimitris Zacharopoulos (HARICA) via Servercert-wg  <mailto:servercert-wg at cabforum.org> <servercert-wg at cabforum.org> wrote:

Purpose of the Ballot

The EV Guidelines have strict rules in the organizationIdentifier values and require the country code of all currently-allowed Registration Schemes (NTR, VAT, PSD) to follow the ISO 3166-1 for the 2-letter country prefix.

The organizationIdentifier language mainly came from ETSI EN 319 412-1 and then the SCWG made several modifications. However, there is an exception for Greece specifically for the VAT Registration Scheme that is aligned with Article 215 of Council Directive 2006/112/EC that allows Greece to use the country prefix "EL". In practice, Greece uses the prefix "EL" to identify itself next to the VAT number of all Legal Entities registered/incorporated/established in Greece, and all other European Countries use this prefix to identify Greek VAT numbers. This can easily be verified in the VIES VAT number validation website where Greece is listed as"EL".

There is also Council Directive 2020/1756 <https://url.avanan.click/v2/___https:/urldefense.proofpoint.com/v2/url?u=https-3A__data.europa.eu_eli_dir_2020_1756_oj&d=DwMDaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=pLBg9yEYzZz6uGZ9yTalH54RHu_MZI1Ch37wv852wbXGmCvaFVFIS9xQyNGMqk_D&s=LSOTJmv9nz1vtYcg288tr66dvFEjYa7S7orq6hR7ey4&e=___.YXAzOmRpZ2ljZXJ0OmE6bzplMGViOTIyZjIwMDAwZWFhYjFhMDM3OGMwNDhjNmQ2Mzo2OmVmM2M6Y2ZkMDcyZGNiMGUxZDIwNWVkMzNlZjVmM2UxZjcwM2VhZmJhMzNkMTY3ZDMzMTdmNTMyN2U2NTlmYWIzNzJmZjpoOkY>  amending Directive 2006/112/EC that requires the prefix "XI" for the identification of taxable persons in Northern Ireland.

This pull request proposes updates to the EV Guidelines to allow those additional prefixes. It also fixes some formatting issues.

The following motion has been proposed by Dimitris Zacharopoulos of HARICA and endorsed by Ben Wilson of Mozilla and Corey Bonnell of Digicert.

MOTION BEGINS

This ballot modifies the “Guidelines for the Issuance and Management of Extended Validation Certificates” (“EV Guidelines”), based on Version 1.8.0.

MODIFY the EV Guidelines as specified in the following Redline: 

*	https://url.avanan.click/v2/___https://github.com/cabforum/servercert/compare/da89d0e9700c6dd89a8263526addc39f472bf54c___.YXAzOmRpZ2ljZXJ0OmE6bzplMGViOTIyZjIwMDAwZWFhYjFhMDM3OGMwNDhjNmQ2Mzo2OjY1YjM6YzZmMTYzYjAwZTNhNjY1NzRmZTk5MDhiY2I3MTVlMWZmNmQ0OTEwNDc4YWFiNzQ4ZmQ4NzE3ZGY1NWFjYzA1Yzp0OkY.

MOTION ENDS

The procedure for this ballot is as follows:

Start time (8:00 UTC)

End time (8:00 UTC)

Discussion (at least 7 days)

2024-01-16

on or after 2024-01-23

Expected Vote for approval (7 days)

TBD

TBD

_______________________________________________
Servercert-wg mailing list
Servercert-wg at cabforum.org <mailto:Servercert-wg at cabforum.org> 
https://urldefense.proofpoint.com/v 2/url?u=https-3A__lists.cabforum.org_mailman_listinfo_servercert-2Dwg&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=pLBg9yEYzZz6uGZ9yTalH54RHu_MZI1Ch37wv852wbXGmCvaFVFIS9xQyNGMqk_D&s=Vm2EaWVVK5hktalPWfpaS6K3L6BSOHUzRDydq3_HyJI&e=

WISeKey SA

Pedro Fuentes
CSO - Trust Services Manager
Office: + 41 (0) 22 594 30 00
Mobile: + 41 (0) 791 274 790

Address: Avenue Louis-Casaï 58 | 1216 Cointrin | Switzerland

Stay connected with  <https://url.avanan.click/v2/___http:/www.wisekey.com___.YXAzOmRpZ2ljZXJ0OmE6bzplMGViOTIyZjIwMDAwZWFhYjFhMDM3OGMwNDhjNmQ2Mzo2Ojc2ZWI6N2RkY2UyNWNjYWY3ZmVjMDQ4OTY3MzFhN2VkMzc1YjJiZDBjMmQzYTIzNzFiYzA1MzRiN2I0M2FkN2Y2YzY2YzpoOkY> WISeKey

THIS IS A TRUSTED MAIL: This message is digitally signed with a WISeKey identity. If you get a mail from WISeKey please check the signature to avoid security risks

CONFIDENTIALITY: This email and any files transmitted with it can be confidential and it’s intended solely for the use of the individual or entity to which they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. If you have received this email in error please notify the sender

DISCLAIMER: WISeKey does not warrant the accuracy or completeness of this message and does not accept any liability for any errors or omissions herein as this message has been transmitted over a public network. Internet communications cannot be guaranteed to be secure or error-free as information may be intercepted, corrupted, or contain viruses. Attachments to this e-mail are checked for viruses; however, we do not accept any liability for any damage sustained by viruses and therefore you are kindly requested to check for viruses upon receipt.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240116/7d01dfb2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5231 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240116/7d01dfb2/attachment-0001.p7s>