[Servercert-wg] [Voting Begins] Ballot SC-75 v3 - Pre-sign linting

Dimitris Zacharopoulos (HARICA) dzacharo at harica.gr
Wed Jun 19 10:16:43 UTC 2024


HARICA votes "yes" to ballot SC-75v3


On 19/6/2024 1:13 μ.μ., Dimitris Zacharopoulos (HARICA) via 
Servercert-wg wrote:
> Voting begins for this ballot.
>
>
>   SC-75 v3 Pre-sign linting
>
>
>     Summary
>
> There have been numerous compliance incidents publicly disclosed by 
> CAs in which they failed to comply with the technical requirements 
> described in standards associated with the issuance and management of 
> publicly-trusted TLS Certificates. However, the industry has developed 
> open-source tools, linters, that are free to use and can help CAs 
> avoid certificate misissuance. Using such linters before issuing a 
> precertificate from a Publicly-Trusted CA (pre-issuance linting) can 
> prevent the mis-issuance in a wide variety of cases.
>
> The following motion has been proposed by Dimitris Zacharopoulos of 
> HARICA and endorsed by Corey Bonnell of Digicert and Ben Wilson of 
> Mozilla.
>
> You can view the GitHub pull request representing this ballot here 
> <https://github.com/cabforum/servercert/pull/518>.
>
>
>     Motion Begins
>
> MODIFY the "Baseline Requirements for the Issuance and Management of 
> Publicly-Trusted TLS Server Certificates" based on Version 2.0.5 as 
> specified in the following redline:
>
>   * https://github.com/cabforum/servercert/compare/20af1b271f2b689344ae353d3e78dc6b772199db...d809c41bc063109e15d46bfe1b5ad6403d823381
>
>
>
>     Motion Ends
>
> This ballot proposes a Final Maintenance Guideline. The procedure for 
> approval of this ballot is as follows:
>
>
>         Discussion (at least 7 days)
>
>   * Start time: 2024-06-12 06:30:00 UTC
>   * End time: on or after 2024-06-19 06:30:00 UTC
>
>
>         Vote for approval (7 days)
>
>   * Start time: 2024-06-19 10:00:00 UTC
>   * End time: 2024-06-26 10:00:00 UTC
>
>
>
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/servercert-wg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240619/f64ef5f0/attachment.html>


More information about the Servercert-wg mailing list