Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-18 Thread Ryan Sleevi
On Wed, Jan 18, 2017 at 7:16 AM, Gervase Markham wrote: > On 17/01/17 23:32, Ryan Sleevi wrote: > > BRs 1.3.0 ( https://cabforum.org/wp-content/uploads/CAB-Forum-BR- > 1.3.0.pdf > > ) already include the clause (in Section 2.2) that: > > "The CA SHALL publicly give effect to

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-18 Thread Gervase Markham
On 17/01/17 23:32, Ryan Sleevi wrote: > BRs 1.3.0 ( https://cabforum.org/wp-content/uploads/CAB-Forum-BR-1.3.0.pdf > ) already include the clause (in Section 2.2) that: > "The CA SHALL publicly give effect to these Requirements and represent > that it will adhere to the latest published version."

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-17 Thread Ryan Sleevi
On Mon, Jan 16, 2017 at 3:30 AM, Gervase Markham wrote: > On 13/01/17 01:56, Ryan Sleevi wrote: >> Notably, 1.3.7 also has IP encumbrances - and uncertainty - the same >> as 1.4.1, so presumably, Mozilla is OK with having encumbered methods >> included. Considering some of these

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-16 Thread Gervase Markham
On 13/01/17 01:56, Ryan Sleevi wrote: > Notably, 1.3.7 also has IP encumbrances - and uncertainty - the same > as 1.4.1, so presumably, Mozilla is OK with having encumbered methods > included. Considering some of these exclusions have existed since the > BR's adoption, that doesn't seem an

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-12 Thread Ryan Sleevi
cy-bounces+jeremy.rowley=digicert.com@lists.mozilla > .org] On Behalf Of Gervase Markham > Sent: Thursday, January 12, 2017 9:45 AM > To: mozilla-dev-security-pol...@lists.mozilla.org > Subject: Policy 2.4 Proposal: Update required version number of Baseline > Requirements to 1.3.7 > &g

RE: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-12 Thread Jeremy Rowley
Of Gervase Markham Sent: Thursday, January 12, 2017 9:45 AM To: mozilla-dev-security-pol...@lists.mozilla.org Subject: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7 Point 12 of the Inclusion section requires conformance to the Baseline Requirements version 1.3

Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-12 Thread Gervase Markham
Point 12 of the Inclusion section requires conformance to the Baseline Requirements version 1.3, released on 16th April 2015. The current version is 1.4.1. I propose changing to version 1.3.7. This is the one before the version which updated the domain validation requirements and which has had to