Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-18 Thread Ryan Sleevi
On Wed, Jan 18, 2017 at 7:16 AM, Gervase Markham wrote: > On 17/01/17 23:32, Ryan Sleevi wrote: > > BRs 1.3.0 ( https://cabforum.org/wp-content/uploads/CAB-Forum-BR- > 1.3.0.pdf > > ) already include the clause (in Section 2.2) that: > > "The CA SHALL publicly give effect to

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-18 Thread Gervase Markham
On 17/01/17 23:32, Ryan Sleevi wrote: > BRs 1.3.0 ( https://cabforum.org/wp-content/uploads/CAB-Forum-BR-1.3.0.pdf > ) already include the clause (in Section 2.2) that: > "The CA SHALL publicly give effect to these Requirements and represent > that it will adhere to the latest published version."

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-17 Thread Ryan Sleevi
On Mon, Jan 16, 2017 at 3:30 AM, Gervase Markham wrote: > On 13/01/17 01:56, Ryan Sleevi wrote: >> Notably, 1.3.7 also has IP encumbrances - and uncertainty - the same >> as 1.4.1, so presumably, Mozilla is OK with having encumbered methods >> included. Considering some of these

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-16 Thread Gervase Markham
On 13/01/17 01:56, Ryan Sleevi wrote: > Notably, 1.3.7 also has IP encumbrances - and uncertainty - the same > as 1.4.1, so presumably, Mozilla is OK with having encumbered methods > included. Considering some of these exclusions have existed since the > BR's adoption, that doesn't seem an

Re: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-12 Thread Ryan Sleevi
Gerv, I'd like to push a little and suggest that the IP issues are not a significant reason for Mozilla not to formalize on 1.4.1 (e.g. with 169 included) Notably, 1.3.7 also has IP encumbrances - and uncertainty - the same as 1.4.1, so presumably, Mozilla is OK with having encumbered methods

RE: Policy 2.4 Proposal: Update required version number of Baseline Requirements to 1.3.7

2017-01-12 Thread Jeremy Rowley
I agree with this approach. Nothing of note was include after the domain validation passed so making 1.3.7 the effective version makes sense. -Original Message- From: dev-security-policy [mailto:dev-security-policy-bounces+jeremy.rowley=digicert.com@lists.mozilla .org] On Behalf Of