Hi Kirk,

CAs that comply with the BRs commit to adhere to "the latest" version published 
by the CABforum. I know that in several F2F meetings the Webtrust and ETSI 
representatives stated that they will make efforts to *annually* adjust the 
respective standards and incorporate the latest ballots but the way the BRs are 
currently written, they trigger changes to policies and operations as soon as a 
ballot passes (for some CAs sooner than later).

I am sure several CAs already started the update process of their policies as 
soon as ballot 169 "passed" so it is important to clarify if this ballot should 
be "paused". Of course, we can't reveal details about the last call before the 
minutes are approved but that will take 10 more days. It would be nice to get 
some guidance from the forum's legal experts sooner, about how the current 
forum rules apply, as this appears to be the first time we have a situation 
like this. 


> On 15 Σεπ 2016, at 22:24, Kirk Hall <kirk.h...@entrust.com> wrote:
> Doug, I have a slightly different opinion about where we are.  Remember that 
> the Forum can’t impose rules on anyone.  The rules come from browser root 
> programs, and we are checked for compliance by our periodic WebTrust/ETSI 
> audits.
> There is already a current set of BRs and EVGL out there (even if we need to 
> go through certain steps to have them readopted in exact compliance with our 
> IPR policy), and I believe the browsers through their own root programs 
> expect us to comply with those guidelines for now (and our auditors will 
> probably audit us using their own WebTrust / ETSI audit standards – which 
> they adopted, not the Forum).  So my feeling is that my own CA should 
> continue to operate as before, and in order to meet browser and WebTrust 
> requirements we should follow the current BRs and EVGL.
> Also, I expect that after we go through a re-adoption process following the 
> exact steps of our IPR policy, the effective date for the new domain 
> validation methods of BR will be the same.  The point of re-adopting 
> the BRs and EVGL is so we all get the benefits and protections of our IPR 
> policy, but there’s no real reason not to follow the current BRs and EVGL in 
> the meantime.
> From: public-boun...@cabforum.org [mailto:public-boun...@cabforum.org] On 
> Behalf Of Doug Beattie
> Sent: Thursday, September 15, 2016 12:11 PM
> To: CABFPub <public@cabforum.org>
> Subject: [cabfpub] Ballot 169 status
> As I understand it from the call today, Ballot 169 has effectively been 
> rejected as a valid ballot and therefor the dates for compliance (March 1, 
> 2017) no longer exist as milestones.  Dean and Kirk are going to propose a 
> process for reviewing the IPR Exclusion notices and define next steps.
> Will there be an updated BR soon with the changes reversed?
> _______________________________________________
> Public mailing list
> Public@cabforum.org
> https://cabforum.org/mailman/listinfo/public
Public mailing list

Reply via email to