[cabfpub] CABForum Teleconference Proposed Topic: Common Browser UI Security Indicators

Hi Kirk. Curt Spann (Apple) and I would like some time on the next CABF teleconference to talk about coordinating browser UI security indicators for TLS/SSL certs. We have an interest in this area, and would like feedback from other browsers and CAs on the following: 1. Should browsers

Re: [cabfpub] Ballot 204: Forbid DTPs from doing Domain/IP Ownership Validation

Microsoft votes YES. Thanks, Mike -Original Message- From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Gervase Markham via Public Sent: Thursday, July 6, 2017 8:13 AM To: CA/Browser Forum Public Discussion List Subject: Re: [cabfpub] Ballot 204:

Re: [cabfpub] CABForum Teleconference Proposed Topic: Common Browser UI Security Indicators

forum.org<mailto:public@cabforum.org>> wrote: Sounds good. Our next teleconference is a week from today, and I’ll schedule a block of time. From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Mike Reilly (WDG) via Public Sent: Thursday, July 13, 2017 11:16 AM To: CA/Browser

Re: [cabfpub] Ballot 205: Membership-Related Clarifications

Microsoft votes yes. Mike From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Gervase Markham via Public Sent: Thursday, June 22, 2017 4:43 AM To: CABFPub Subject: [cabfpub] Ballot 205: Membership-Related Clarifications Ballot 205: Membership-Related

Re: [cabfpub] Voting on Ballot 205: Membership-Related Clarifications ends tomorrow

Microsoft votes yes. From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Adriano Santoni via Public Sent: Wednesday, July 5, 2017 10:51 PM To: public@cabforum.org Subject: Re: [cabfpub] Voting on Ballot 205: Membership-Related Clarifications ends tomorrow Actalis votes "yes" Il

Re: [cabfpub] Ballot 203: Formation of Network Security Working Group (v2)

Microsoft votes yes. I like that this working group would also be considering simply referring to another existing recognized standard (e.g. (https://www.cisecurity.org/controls/) instead of updating the current Network Security Guidelines in order to expedite the approval process within the

Re: [cabfpub] Obtaining an EV cert for phishing

Gerv, interesting. I'd also be interested in looking more into the areas you highlighted. Thanks, Mike -Original Message- From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Gervase Markham via Public Sent: Thursday, September 14, 2017 6:08 AM To: CABFPub

Re: [cabfpub] Ballot 212: Canonicalise formal name of the Baseline Requirements

Microsoft votes yes On Fri, Aug 18, 2017 at 11:06 AM, Gervase Markham via Public > wrote: Ballot 212: Canonicalise formal name of the Baseline Requirements Purpose of Ballot: to make the formal name of the Baseline Requirements document clear,

[cabfpub] CAA Algorithms for CAs in Microsoft's Trusted Root Program

CA Community, I wanted to provide you with Microsoft's position on CAA algorithms to add to what has already been posted by Google Chrome and Mozilla. Given that CAA is now mandatory and ballot 214 is currently in voting period, Microsoft will give immediate dispensation for CAs to issue

Re: [cabfpub] Voting has started on Ballot 214 - CAA Discovery CNAME Errata

Microsoft votes YES on 214. From: Kirk Hall Sent: Wednesday, September 20, 2017 5:55 PM To: CA/Browser Forum Public Discussion List > Subject: Voting has started on Ballot 21 - CAA Discovery CNAME Errata Voting has started on Ballot 214 – CAA

Re: [cabfpub] Draft Agenda for CA/Browser Forum Teleconference - Thursday, Nov. 30, 2017 at 12:00 pm Eastern Time

Kirk, can we have a quick 5 min item to remind folks that Gerv posted a wiki in order to try and bring some light to the discussion for and against CT redaction here:

Re: [cabfpub] Draft Agenda for CA/Browser Forum Teleconference - Thursday, Nov. 30, 2017 at 12:00 pm Eastern Time

Thanks Kirk. I just found out I have a exec meeting which conflicts with the Forum meeting this week. I won't be able to attend but the point of the agenda item was to remind folks of the post Gerv made regarding redaction in the hopes of getting more conversation going on the subject.

Re: [cabfpub] New RFC on CT Domain Label Redaction

Thanks Gerv. I think this will be helpful as we have been going through both internal and one off conversations with others on this topic. Mike -Original Message- From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Gervase Markham via Public Sent: Tuesday, November 21,

Re: [cabfpub] Voting ends on Ballot 207 (ASN.1 Jurisdiction in EV Guidelines) on Monday, October 23, 2017 at 22:00 UTC

Microsoft votes YES on Ballot 207. Mike From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Kirk Hall via Public Sent: Friday, October 20, 2017 8:35 AM To: CA/Browser Forum Public Discussion List Subject: [cabfpub] Voting ends on Ballot 207 (ASN.1 Jurisdiction

Re: [cabfpub] Clarification on DNAME erratum

Jacob, sorry for the delayed response. To your question " Do root programs consider the "natural" interpretation reasonable?" The answer is "yes" for Microsoft's program. Thanks, Mike -Original Message- From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Gervase Markham

Re: [cabfpub] Voting has started on Ballot 208 - dnQualifiers

Microsoft votes "No" Thanks, Mike On Oct 20, 2017, at 8:28 AM, Kirk Hall via Public > wrote: Voting ends Thursday, Oct. 26 at 22:00 UTC From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ben Wilson via Public Sent: Thursday,

Re: [cabfpub] Ballot 218 version 2: Remove validation methods #1 and #5

Thanks Ryan. I appreciate the overall summary you provided and the details behind the core facts. I see voting has just started so looks like we’ll proceed now. Thanks, Mike From: Ryan Sleevi [mailto:sle...@google.com] Sent: Monday, January 29, 2018 1:07 PM To: Mike Reilly (WDG)

Re: [cabfpub] Voting begins: Ballot 218 version 2

Microsoft votes YES From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Tim Hollebeek via Public Sent: Monday, January 29, 2018 1:52 PM To: CA/Browser Forum Public Discussion List Subject: [cabfpub] Voting begins: Ballot 218 version 2 I'm highly skeptical that

Re: [cabfpub] Ballot 218 version 2: Remove validation methods #1 and #5

Ryan, I definitely agree there is a security risk with 3.2.2.4.1 and any other validation method entirely dependent on a “trust us” model. I did see the specifics Jeremy shared about the problems with method 1 in an earlier thread. You mention in your first reply that “To date, Entrust has

[cabfpub] Slot 13 on Agenda for CABF F2F meeting March 6-8, 2018, Herndon, VA

Kirk, can we block 30 mins of slot 13 for a CCADB Audit Letter Validation demo/Q We are doing this now but soon CAs will be expected to run the validation tool. Thanks, Mike On Feb 27, 2018, at 6:09 PM, Kirk Hall via Public > wrote: Tuesday,

Re: [cabfpub] Voting Begins: Ballot 220: Minor Cleanups (Spring 2018)

Microsoft votes YES on ballot 220. Thanks, Mike From: Public On Behalf Of Tim Hollebeek via Public Sent: Friday, March 23, 2018 3:40 AM To: CA/Browser Forum Public Discussion List Subject: [cabfpub] Voting Begins: Ballot 220: Minor Cleanups

Re: [cabfpub] Voting Begins: Ballot 206: Amendment to IPR Policy & Bylaws re Working Group Formation

Microsoft votes YES. Thanks, Mike From: Public On Behalf Of Virginia Fournier via Public Sent: Tuesday, March 27, 2018 8:20 PM To: CA/Browser Forum Public Discussion List Subject: [cabfpub] Voting Begins: Ballot 206: Amendment to IPR Policy &