[cabf_validation] Certificate usages/issuance flows to model for the F2F

Doug Beattie doug.beattie at globalsign.com
Fri Feb 17 16:20:46 UTC 2023


Hi Corey,

 

I’ll work on some of the Reseller flows and can also contribute/collaborate with those working on the Service provider/web hosting scenarios (if they are different from CDN flows).

 

Doug

 

From: Validation <validation-bounces at cabforum.org> On Behalf Of Wayne Thayer via Validation
Sent: Wednesday, February 15, 2023 6:31 PM
To: Corey Bonnell <Corey.Bonnell at digicert.com>; CA/Browser Forum Validation SC List <validation at cabforum.org>
Subject: Re: [cabf_validation] Certificate usages/issuance flows to model for the F2F

 

I will volunteer to describe the CDN flow (#2).

 

I wasn't on last week's call, so I'm wondering how best to represent these models (Bullet points? Flow charts? Include renewals?) and what level of detail we're looking for. It would be helpful if someone could share a draft so that the other volunteers can use a similar format.

 

Thanks,

 

Wayne

 

On Wed, Feb 15, 2023 at 12:55 PM Corey Bonnell via Validation <validation at cabforum.org <mailto:validation at cabforum.org> > wrote:

Hello,

I received an off-list email with a few excellent suggestions to improve the collaboration process:

 

1.	Allow for multiple people to model the same flow. Additionally, the same person can model multiple flows.
2.	Create separate Google Docs for each person and each flow to keep the document sizes manageable. I’ll send out sharing links to the volunteers.

 

To kick things off, I’ll volunteer to model “Traditional hosting provider” and “ACME”.

 

Thanks,

Corey

 

From: Validation <validation-bounces at cabforum.org <mailto:validation-bounces at cabforum.org> > On Behalf Of Corey Bonnell via Validation
Sent: Thursday, February 9, 2023 12:16 PM
To: CABforum3 <validation at cabforum.org <mailto:validation at cabforum.org> >
Subject: [cabf_validation] Certificate usages/issuance flows to model for the F2F

 

Hello,

As discussed on the call today, we developed a list of 5 different issuance flows that we’d like to model in preparation for the F2F discussion:

 

1.	ACME model

2. CDN

3. "Traditional" hosting provider

               - "user"/admin makes the CSR

4. Reseller/partners

5. "Cloud" provider

               - makes CSR for web server

 

To help prepare for the F2F discussion, we’d like to call for volunteers to develop a model for each of these different issuance flows. Specifically, each step of the validation and issuance process should be enumerated. If possible, each step should also reference the relevant BR section.

 

If you’d like to work on one of these items, please reply to this email with the number of the flow that you’d like to model.

 

I’ll work on spinning up a Google Docs page for each of these items and follow up on this list when this has been done.

 

Thanks,

Corey

_______________________________________________
Validation mailing list
Validation at cabforum.org <mailto:Validation at cabforum.org> 
https://lists.cabforum.org/mailman/listinfo/validation

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20230217/b71be967/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 8404 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20230217/b71be967/attachment-0001.p7s>


More information about the Validation mailing list