[Servercert-wg] [Voting Begins] Ballot SC-74 - Clarify CP/CPS structure according to RFC 3647

[陳立群]

Chunghwa Telecom votes "No" to ballot SC-74.


    Li-Chun Chen


-----Original Message-----
From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of
Dimitris Zacharopoulos (HARICA) via Servercert-wg
Sent: Friday, May 10, 2024 12:06 AM
To: servercert-wg at cabforum.org
Subject: [外部郵件]Re: [Servercert-wg] [Voting Begins] Ballot SC-74 -
Clarify CP/CPS structure according to RFC 3647

HARICA votes "no" to ballot SC-74.

Dimitris.


On 5/5/2024 12:06 μ.μ., Dimitris Zacharopoulos (HARICA) wrote:


	HARICA votes "yes" to ballot SC-74.
	
	
	On 5/5/2024 11:24 π.μ., Dimitris Zacharopoulos (HARICA) via
Servercert-wg wrote:
	

		Voting begins for ballot SC-74.
		

		SC-74 - Clarify CP/CPS structure according to RFC 3647


		Summary


		The TLS Baseline Requirements require in section 2.2 that:

		"The Certificate Policy and/or Certification Practice
Statement MUST be structured in accordance with RFC 3647 and MUST include
all material required by RFC 3647."

		The intent of this language was to ensure that all CAs' CP
and/or CPS documents contain a similar structure, making it easier to review
and compare against the BRs. However, there was some ambiguity as to the
actual structure that CAs should follow. After several discussions in the
SCWG Public Mailing List
<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.cab
forum.org%2Fpipermail%2Fservercert-wg%2F2023-November%2F004070.html&data=05%
7C02%7Crealsky%40cht.com.tw%7Cd05db8f105f940bae81b08dc70421522%7C54eb9440cf0
345fe835e61bd4ce515c8%7C0%7C0%7C638508676358101018%7CUnknown%7CTWFpbGZsb3d8e
yJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%
7C&sdata=0ArURxFBOKXx7idN%2Bhq8PfM%2Fno1gPS7%2F8UOyt1%2FhyuY%3D&reserved=0>
and F2F meetings, it was agreed that more clarity should be added to the
existing requirement, pointing to the outline described in section 6 of RFC
3647.

		The following motion has been proposed by Dimitris
Zacharopoulos (HARICA) and endorsed by Aaron Poulsen (Amazon) and Tim
Hollebeek (Digicert). 
		

		You can view the github pull request representing this
ballot here
<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.co
m%2Fcabforum%2Fservercert%2Fpull%2F503&data=05%7C02%7Crealsky%40cht.com.tw%7
Cd05db8f105f940bae81b08dc70421522%7C54eb9440cf0345fe835e61bd4ce515c8%7C0%7C0
%7C638508676358111640%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2
luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=LhUovKWu6BVb%2Bgm0Gz
8vclynq360krmRL6YBiydLvhk%3D&reserved=0> . 
		


		Motion Begins


		MODIFY the "Baseline Requirements for the Issuance and
Management of Publicly-Trusted TLS Server Certificates" based on Version
2.0.4 as specified in the following redline:
		

	
*	https://github.com/cabforum/servercert/compare/c4a34fe2292022e0a04ba
66b5a85df75907ac2a2...f6a90e2a652fbb7a2d62a976b70f4af3adce8dae
<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.co
m%2Fcabforum%2Fservercert%2Fcompare%2Fc4a34fe2292022e0a04ba66b5a85df75907ac2
a2...f6a90e2a652fbb7a2d62a976b70f4af3adce8dae&data=05%7C02%7Crealsky%40cht.c
om.tw%7Cd05db8f105f940bae81b08dc70421522%7C54eb9440cf0345fe835e61bd4ce515c8%
7C0%7C0%7C638508676358119054%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ
QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=YKGbmh48JeTJh
bWDykvV1QA7ijqjvV7ESll11g4m4uM%3D&reserved=0>  
			


		Motion Ends


		This ballot proposes a Final Maintenance Guideline. The
procedure for approval of this ballot is as follows:


		Discussion (at least 7 days)


		*	Start time: 2024-04-25 16:30:00 UTC
		*	End time: on or after 2024-05-02 16:30:00 UTC


		Vote for approval (7 days)


		*	Start time: 2024-05-05 8:30:00 UTC
		*	End time: 2024-05-12 8:30:00 UTC



		 
		_______________________________________________
		Servercert-wg mailing list
		Servercert-wg at cabforum.org
<mailto:Servercert-wg at cabforum.org> 
		https://lists.cabforum.org/mailman/listinfo/servercert-wg
<https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.cab
forum.org%2Fmailman%2Flistinfo%2Fservercert-wg&data=05%7C02%7Crealsky%40cht.
com.tw%7Cd05db8f105f940bae81b08dc70421522%7C54eb9440cf0345fe835e61bd4ce515c8
%7C0%7C0%7C638508676358125350%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLC
JQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=smvaIm69H5Kc
rU80UYVHOlC73%2BKYRuOo40%2Fu7Avr62E%3D&reserved=0> 



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7748 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240510/82623ba0/attachment.p7s>