[Servercert-wg] Ballot SC-75 v3 - Pre-sign linting

[Aaron Gable]

Let's Encrypt / ISRG votes Yes on SC-75v3.

On Tue, Jun 11, 2024 at 11:33 PM Dimitris Zacharopoulos (HARICA) via
Servercert-wg <servercert-wg at cabforum.org> wrote:

> SC-75 v3 Pre-sign linting Summary
>
> There have been numerous compliance incidents publicly disclosed by CAs in
> which they failed to comply with the technical requirements described in
> standards associated with the issuance and management of publicly-trusted
> TLS Certificates. However, the industry has developed open-source tools,
> linters, that are free to use and can help CAs avoid certificate
> misissuance. Using such linters before issuing a precertificate from a
> Publicly-Trusted CA (pre-issuance linting) can prevent the mis-issuance in
> a wide variety of cases.
>
> The following motion has been proposed by Dimitris Zacharopoulos of HARICA
> and endorsed by Corey Bonnell of Digicert and Ben Wilson of Mozilla.
>
> You can view the GitHub pull request representing this ballot here
> <https://github.com/cabforum/servercert/pull/518>.
> Motion Begins
>
> MODIFY the "Baseline Requirements for the Issuance and Management of
> Publicly-Trusted TLS Server Certificates" based on Version 2.0.5 as
> specified in the following redline:
>
>    -
>    https://github.com/cabforum/servercert/compare/20af1b271f2b689344ae353d3e78dc6b772199db...d809c41bc063109e15d46bfe1b5ad6403d823381
>
> Motion Ends
>
> This ballot proposes a Final Maintenance Guideline. The procedure for
> approval of this ballot is as follows:
> Discussion (at least 7 days)
>
>    - Start time: 2024-06-12 06:30:00 UTC
>    - End time: on or after 2024-06-19 06:30:00 UTC
>
> Vote for approval (7 days)
>
>    - Start time: TBD
>    - End time: TBD
>
>
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/servercert-wg
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240625/8086fa13/attachment.html>