[Smcwg-public] Validation of Information for Name-Constrained SubCAs

[Ben Wilson]

Does anyone recall offhand why section 7.1.5 doesn't also refer to section
3.2.2.1?

Section 7.1.5 says, "The CA SHALL confirm that the Applicant has registered
the FQDN contained in the rfc822Name or has authorized by the domain
registrant to act on the registrant’s behalf in line with the verification
practices of Section 3.2.2.3."   Section 3.2.2.3 is "Validating applicant
as operator of associated mail server(s)", and section 3.2.2.1 is "Validating
authority over mailbox via domain."  Was there a concern that 3.2.2.1 was
too broad and that validation had to be done pursuant to section 3.2.2.3?
And what about section 3.2.2.2 (validating control over mailbox via email).

Thanks,

Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20230808/23f31736/attachment.html>