[Servercert-wg] [Voting Period Begins]: SC65: Convert EVGs into RFC 3647 format v2

[Corey Bonnell]

DigiCert votes YES on SC-65v2.

 

While the ballot motion contains a potentially confusing redline link, it
does not affect the actual text changes introduced by the ballot.
Additionally, the reformat proposed by this ballot is valuable in getting us
closer to consistently formatted documents, so it is good to not delay this
work further.

 

Moving forward, it would be useful to develop guidance for ballot authors on
how redline links should be created to ensure that proposed changes are
clearly communicated.

 

Thanks,

Corey

 

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Inigo
Barreira via Servercert-wg
Sent: Monday, March 4, 2024 10:34 AM
To: CA/B Forum Server Certificate WG Public Discussion List
<servercert-wg at cabforum.org>
Subject: [Servercert-wg] [Voting Period Begins]: SC65: Convert EVGs into RFC
3647 format v2

 

Summary: 

The Extended Validation Certificates guidelines (EVGs) were developed and
written in a specific format. Since then, the RFC 3647 has been the basis
(and the de-facto standard) for the CA/Browser Forum to develop other
documents.

This ballot aims to update the EVGs to follow the RFC 3647 format without
changing any content, just moving current sections to those defined in the
RFC 3647. There are no normative requirements changes.

This change also affects the Baseline Requirements for TSL certificates
(BRs) which needs to point to the new sections of the EVGs. Both documents
will be updated according to the latest version published.

This ballot is proposed by Iñigo Barreira (Sectigo) and endorsed by Pedro
Fuentes (OISTE) and Ben Wilson (Mozilla).

--- Motion Begins ---

This ballot modifies the “Baseline Requirements for the Issuance and
Management of Publicly-Trusted TLS Certificates" ("TLS Baseline
Requirements"), based on Version 2.0.2 and the “Guidelines for the Issuance
and Management of Extended Validation Certificates” (EVGs) based on Version
1.8.0. 

MODIFY the TLS EVGs and BRs as specified in the following Redline:

 
<https://url.avanan.click/v2/___https:/github.com/cabforum/servercert/compar
e/90a98dc7c1131eaab01af411968aa7330d315b9b...dedeebfe036fa5a6f0d7ae985ea0831
7ba60b8cb___.YXAzOmRpZ2ljZXJ0OmE6bzoyMGJlODM5Nzg2ZTZiZGMwYmIzNWJkYjlkNTlmODI
zNzo2OmJmYzQ6M2ZmYmYyMjViOTNlYjQ3MWYwNTZkOTU5YjY1YTFiYmQwZmQ4ZTY2OWMyOGM3YWV
kNDRlNTgzNTM1OWU4MWQ3MzpoOkY> Comparing
90a98dc7c1131eaab01af411968aa7330d315b9b...dedeebfe036fa5a6f0d7ae985ea08317b
a60b8cb · cabforum/servercert (github.com)

--- Motion Ends ---

This ballot proposes a Final Maintenance Guideline for the BRs and EVGs. The
procedure for approval of this ballot is as follows:

Discussion (at least 7 days)

1.	Start time: 2024-02-20 17:00:00 UTC
2.	End time: not before 2024-03-04 15:00:00 UTC

Vote for approval (7 days)

1.	Start time: 2024-03-04 15:30:00 UTC
2.	End time: 2024-03-11 15:30:00 UTC

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240308/49b11bd0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5231 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240308/49b11bd0/attachment.p7s>