Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-21 Thread Peter Miškovič via Public 
Disig votes „YES“.
Regards
Peter

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: Thursday, December 7, 2017 5:53 PM
To: CABFPub 
Subject: [cabfpub] Ballot 217: Sunset RFC 2527

Ballot 217: Sunset RFC 2527

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference.

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

-- MOTION BEGINS --

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."



This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

-- MOTION ENDS --

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in favor of the motion must indicate a clear 'yes' in the 
response. A vote against must indicate a clear 'no' in the response. A vote to 
abstain must indicate a clear 'abstain' in the response. Unclear responses will 
not be counted. The latest vote received from any representative of a voting 
member before the close of the voting period will be counted. Voting members 
are listed here: https://cabforum.org/members/

In order for the

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-21 Thread Mads Egil Henriksveen via Public 
Buypass votes YES.

Regards
Mads

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: torsdag 7. desember 2017 17:53
To: CABFPub 
Subject: [cabfpub] Ballot 217: Sunset RFC 2527

Ballot 217: Sunset RFC 2527

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference.

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

-- MOTION BEGINS --

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."



This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

-- MOTION ENDS --

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in favor of the motion must indicate a clear 'yes' in the 
response. A vote against must indicate a clear 'no' in the response. A vote to 
abstain must indicate a clear 'abstain' in the response. Unclear responses will 
not be counted. The latest vote received from any representative of a voting 
member before the close of the voting period will be counted. Voting members 
are listed here: https://cabforum.org/members/

In order for the

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-20 Thread Kirk Hall via Public 
You are right, I am wrong.  I will record all votes.  Sorry for getting the day 
wrong.

 

From: Jos Purvis (jopurvis) [mailto:jopur...@cisco.com] 
Sent: Wednesday, December 20, 2017 8:19 PM
To: Kirk Hall <kirk.h...@entrustdatacard.com>; CA/Browser Forum Public 
Discussion List <public@cabforum.org>; Enric Castillo <enric.casti...@anf.es>
Subject: [EXTERNAL]Re: [cabfpub] Ballot 217: Sunset RFC 2527

 

Yes, but today is Wednesday the 20th and voting continues until tomorrow, 
Thursday 21 Dec at 2200 UTC, no? That should also apply to Curt’s vote for 
Apple on ballot 216, since 216 and 217 have the same end time.

 

 

-- 
Jos Purvis (jopur...@cisco.com <mailto:jopur...@cisco.com> )
.:|:.:|:. cisco systems  | Cryptographic Services
PGP: 0xFD802FEE07D19105  | +1 919.991.9114 (desk)

 

 

From: Public <public-boun...@cabforum.org <mailto:public-boun...@cabforum.org> 
> on behalf of Kirk Hall via Public <public@cabforum.org 
<mailto:public@cabforum.org> >
Reply-To: Kirk Hall <kirk.h...@entrustdatacard.com 
<mailto:kirk.h...@entrustdatacard.com> >, CA/Browser Forum Public Discussion 
List <public@cabforum.org <mailto:public@cabforum.org> >
Date: Wednesday, 20 December, 2017 at 20:52 
To: Enric Castillo <enric.casti...@anf.es <mailto:enric.casti...@anf.es> >, 
CA/Browser Forum Public Discussion List <public@cabforum.org 
<mailto:public@cabforum.org> >
Subject: Re: [cabfpub] Ballot 217: Sunset RFC 2527

 

I think you voted 30 minutes after the voting period ended – it looks like your 
vote came in at 14:30 Pacific time, and UTC is +8:00 from Pacific, so I think 
you voted at 22:30 UTC.   However, the ballot has passed in any event.

 

I won’t be counting this vote unless someone tells me I’m wrong.

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Enric Castillo 
via Public
Sent: Wednesday, December 20, 2017 2:30 PM
To: public@cabforum.org <mailto:public@cabforum.org> 
Subject: [EXTERNAL]Re: [cabfpub] Ballot 217: Sunset RFC 2527

 

ANF Autoridad de Certificación votes yes.

 

El 07/12/2017 a las 11:52, Ryan Sleevi via Public escribió:

Ballot 217: Sunset RFC 2527 

 

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

 

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

 

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference. 

 

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

 

-- MOTION BEGINS --

 

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

 

In Section 2.2, replace the text:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

 

with the following:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

 

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."

 

 

 

This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-20 Thread Jos Purvis (jopurvis) via Public 
Cisco votes YES on ballot 217.

 

 

-- 
Jos Purvis (jopur...@cisco.com)
.:|:.:|:. cisco systems  | Cryptographic Services
PGP: 0xFD802FEE07D19105  | +1 919.991.9114 (desk)

 

 

From: Public  on behalf of Ryan Sleevi via Public 

Reply-To: Ryan Sleevi , CA/Browser Forum Public Discussion 
List 
Date: Thursday, 7 December, 2017 at 11:53 
To: CABFPub 
Subject: [cabfpub] Ballot 217: Sunset RFC 2527

 

Ballot 217: Sunset RFC 2527 

 

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

 

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

 

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference. 

 

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

 

-- MOTION BEGINS --

 

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

 

In Section 2.2, replace the text:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

 

with the following:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

 

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."

 

 

 

This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

 

In Section 8.2.2, replace the text:

"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

 

With the following:

"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

 

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

 

-- MOTION ENDS --


The procedure for approval of this ballot is as follows:

 

Discussion (7 to 14 days)

Start Time: 2017-12-07 22:00:00 UTC

End Time: 2017-12-14 22:00:00 UTC

 

Vote for approval (7 days)

Start Time: 2017-12-14 22:00:00 UTC

End Time: 2017-12-21 22:00:00 UTC

 

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in favor of the motion must indicate a clear 'yes' in the 
response. A vote against must indicate a

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-20 Thread Jos Purvis (jopurvis) via Public 
Yes, but today is Wednesday the 20th and voting continues until tomorrow, 
Thursday 21 Dec at 2200 UTC, no? That should also apply to Curt’s vote for 
Apple on ballot 216, since 216 and 217 have the same end time.

 

 

-- 
Jos Purvis (jopur...@cisco.com)
.:|:.:|:. cisco systems  | Cryptographic Services
PGP: 0xFD802FEE07D19105  | +1 919.991.9114 (desk)

 

 

From: Public <public-boun...@cabforum.org> on behalf of Kirk Hall via Public 
<public@cabforum.org>
Reply-To: Kirk Hall <kirk.h...@entrustdatacard.com>, CA/Browser Forum Public 
Discussion List <public@cabforum.org>
Date: Wednesday, 20 December, 2017 at 20:52 
To: Enric Castillo <enric.casti...@anf.es>, CA/Browser Forum Public Discussion 
List <public@cabforum.org>
Subject: Re: [cabfpub] Ballot 217: Sunset RFC 2527

 

I think you voted 30 minutes after the voting period ended – it looks like your 
vote came in at 14:30 Pacific time, and UTC is +8:00 from Pacific, so I think 
you voted at 22:30 UTC.   However, the ballot has passed in any event.

 

I won’t be counting this vote unless someone tells me I’m wrong.

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Enric Castillo 
via Public
Sent: Wednesday, December 20, 2017 2:30 PM
To: public@cabforum.org
Subject: [EXTERNAL]Re: [cabfpub] Ballot 217: Sunset RFC 2527

 

ANF Autoridad de Certificación votes yes.

 

El 07/12/2017 a las 11:52, Ryan Sleevi via Public escribió:

Ballot 217: Sunset RFC 2527 

 

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

 

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

 

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference. 

 

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

 

-- MOTION BEGINS --

 

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

 

In Section 2.2, replace the text:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

 

with the following:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

 

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."

 

 

 

This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

 

In Section 8.2.2, replace the text:

"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

 

With the following:

"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent requ

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-20 Thread Kirk Hall via Public 
I think you voted 30 minutes after the voting period ended – it looks like your 
vote came in at 14:30 Pacific time, and UTC is +8:00 from Pacific, so I think 
you voted at 22:30 UTC.   However, the ballot has passed in any event.

I won’t be counting this vote unless someone tells me I’m wrong.

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Enric Castillo 
via Public
Sent: Wednesday, December 20, 2017 2:30 PM
To: public@cabforum.org
Subject: [EXTERNAL]Re: [cabfpub] Ballot 217: Sunset RFC 2527


ANF Autoridad de Certificación votes yes.

El 07/12/2017 a las 11:52, Ryan Sleevi via Public escribió:
Ballot 217: Sunset RFC 2527

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference.

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

-- MOTION BEGINS --

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."



This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

-- MOTION ENDS --

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the Public 
li

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-20 Thread Enric Castillo via Public 

ANF Autoridad de Certificación votes yes.


El 07/12/2017 a las 11:52, Ryan Sleevi via Public escribió:

*Ballot 217: Sunset RFC 2527*

Purpose of Ballot: The Baseline Requirements and Extended Validation 
Guidelines require that CA's disclosures of the Certificate Policy 
and/or Certification Practice Statements include all of the material 
required by either RFC 2527 or RFC 3647 and structured in accordance 
with RFC 2527 or RFC 3647.


RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 
3647 in 2003. This sunsets the use of RFC 2527, ensuring that CAs' 
disclosures will follow a consistent pattern across the industry, 
facilitating easier review by Subscribers, Browsers, and the broader 
community. Based upon Member feedback, 6 months is provided for CAs to 
review and update their CP/CPS documents.


This motion aligns the language to be consistent between the BRs and 
the EVGs. For the benefit of minimal changes, this aligns the existing 
language through duplication, rather than attempting to incorporate 
the BRs by reference.


The following motion has been proposed by Ryan Sleevi of Google and 
endorsed by Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of 
HARICA.


*-- MOTION BEGINS --*

This ballot modifies the "Baseline Requirements for the Issuance and 
Management of Publicly-Trusted Certificates" as follows, based upon 
Version 1.5.1:


In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 8.1). The 
disclosures MUST include all the material required by RFC 2527 or RFC 
3647, and MUST be structured in accordance with either RFC 2527 or RFC 
3647. "


with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 8.1).


Effective as of 31 May 2018, the Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
RFC 3647. Prior to 31 May 2018, the Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
either RFC 2527 or RFC 3647. The Certificate Policy and/or 
Certification Practice Statement MUST include all material required by 
RFC 3647 or, if structured as such, RFC 2527."




This ballot modifies the "Guidelines for the Issuance and Management 
of Extended Validation Certificates" as follows, based on Version 1.6.6:


In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an 
appropriate and readily accessible online means that is available on a 
24x7 basis.  The CA is also REQUIRED to publicly disclose its CA 
business practices as required by WebTrust for CAs and ETSI TS 102 042 
and ETSI EN 319 411-1. The disclosures MUST be structured in 
accordance with either RFC 2527 or RFC 3647."


With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 17.1).


Effective as of 31 May 2018, the CA's Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
RFC 3647. Prior to 31 May 2018, the CA's Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
either RFC 2527 or RFC 3647. The Certificate Policy and/or 
Certification Practice Statement MUST include all material required by 
RFC 3647 or, if structured as such, RFC 2527."


*-- MOTION ENDS --*

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the 
Public list. A vote in favor of the motion must indicate a clear 'yes' 
in the response. A vote against must indicate a clear 'no' in the 
response. A vote to abstain must indicate a clear 'abstain' in the 
response. Unclear responses will not be counted. The latest vote 
received from any representative of a voting member before the close 
of the voting period will be counted. Voting members are listed here: 
https://cabforum.org/members/


In order for the motion to be adopted, two thirds or more of the votes 
cast by members in the CA category and greater than

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-20 Thread Frank Corday via Public 
Trustwave votes YES to Ballot 217

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: Thursday, December 07, 2017 10:53 AM
To: CABFPub 
Subject: [cabfpub] Ballot 217: Sunset RFC 2527

Ballot 217: Sunset RFC 2527

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference.

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

-- MOTION BEGINS --

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."



This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

-- MOTION ENDS --

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in favor of the motion must indicate a clear 'yes' in the 
response. A vote against must indicate a clear 'no' in the response. A vote to 
abstain must indicate a clear 'abstain' in the response. Unclear responses will 
not be counted. The latest vote received from any representative of a voting 
member before the close of the voting period will be counted. Voting members 
are listed here:

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-18 Thread Christopher Kemmerer via Public 

SSL.com votes YES.

csk


On 12/7/2017 10:52 AM, Ryan Sleevi via Public wrote:

*Ballot 217: Sunset RFC 2527*

Purpose of Ballot: The Baseline Requirements and Extended Validation 
Guidelines require that CA's disclosures of the Certificate Policy 
and/or Certification Practice Statements include all of the material 
required by either RFC 2527 or RFC 3647 and structured in accordance 
with RFC 2527 or RFC 3647.


RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 
3647 in 2003. This sunsets the use of RFC 2527, ensuring that CAs' 
disclosures will follow a consistent pattern across the industry, 
facilitating easier review by Subscribers, Browsers, and the broader 
community. Based upon Member feedback, 6 months is provided for CAs to 
review and update their CP/CPS documents.


This motion aligns the language to be consistent between the BRs and 
the EVGs. For the benefit of minimal changes, this aligns the existing 
language through duplication, rather than attempting to incorporate 
the BRs by reference.


The following motion has been proposed by Ryan Sleevi of Google and 
endorsed by Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of 
HARICA.


*-- MOTION BEGINS --*

This ballot modifies the "Baseline Requirements for the Issuance and 
Management of Publicly-Trusted Certificates" as follows, based upon 
Version 1.5.1:


In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 8.1). The 
disclosures MUST include all the material required by RFC 2527 or RFC 
3647, and MUST be structured in accordance with either RFC 2527 or RFC 
3647. "


with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 8.1).


Effective as of 31 May 2018, the Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
RFC 3647. Prior to 31 May 2018, the Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
either RFC 2527 or RFC 3647. The Certificate Policy and/or 
Certification Practice Statement MUST include all material required by 
RFC 3647 or, if structured as such, RFC 2527."




This ballot modifies the "Guidelines for the Issuance and Management 
of Extended Validation Certificates" as follows, based on Version 1.6.6:


In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an 
appropriate and readily accessible online means that is available on a 
24x7 basis.  The CA is also REQUIRED to publicly disclose its CA 
business practices as required by WebTrust for CAs and ETSI TS 102 042 
and ETSI EN 319 411-1. The disclosures MUST be structured in 
accordance with either RFC 2527 or RFC 3647."


With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 17.1).


Effective as of 31 May 2018, the CA's Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
RFC 3647. Prior to 31 May 2018, the CA's Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
either RFC 2527 or RFC 3647. The Certificate Policy and/or 
Certification Practice Statement MUST include all material required by 
RFC 3647 or, if structured as such, RFC 2527."


*-- MOTION ENDS --*

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the 
Public list. A vote in favor of the motion must indicate a clear 'yes' 
in the response. A vote against must indicate a clear 'no' in the 
response. A vote to abstain must indicate a clear 'abstain' in the 
response. Unclear responses will not be counted. The latest vote 
received from any representative of a voting member before the close 
of the voting period will be counted. Voting members are listed here: 
https://cabforum.org/members/


In order for the motion to be adopted, two thirds or more of the votes 
cast by members in the CA category and greater than 50% of the votes 
cast by

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-18 Thread Curt Spann via Public 
Apple votes YES.

Curt

> On Dec 7, 2017, at 8:52 AM, Ryan Sleevi via Public  
> wrote:
> 
> Ballot 217: Sunset RFC 2527
> 
> Purpose of Ballot: The Baseline Requirements and Extended Validation 
> Guidelines require that CA's disclosures of the Certificate Policy and/or 
> Certification Practice Statements include all of the material required by 
> either RFC 2527 or RFC 3647 and structured in accordance with RFC 2527 or RFC 
> 3647.
> 
> RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
> 2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
> follow a consistent pattern across the industry, facilitating easier review 
> by Subscribers, Browsers, and the broader community. Based upon Member 
> feedback, 6 months is provided for CAs to review and update their CP/CPS 
> documents.
> 
> This motion aligns the language to be consistent between the BRs and the 
> EVGs. For the benefit of minimal changes, this aligns the existing language 
> through duplication, rather than attempting to incorporate the BRs by 
> reference. 
> 
> The following motion has been proposed by Ryan Sleevi of Google and endorsed 
> by Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.
> 
> -- MOTION BEGINS --
> 
> This ballot modifies the "Baseline Requirements for the Issuance and 
> Management of Publicly-Trusted Certificates" as follows, based upon Version 
> 1.5.1:
> 
> In Section 2.2, replace the text:
> "The CA SHALL publicly disclose its Certificate Policy and/or Certification 
> Practice Statement through an appropriate and readily accessible online means 
> that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
> business practices to the extent required by the CA's selected audit scheme 
> (see Section 8.1). The disclosures MUST include all the material required by 
> RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 
> 2527 or RFC 3647. "
> 
> with the following:
> "The CA SHALL publicly disclose its Certificate Policy and/or Certification 
> Practice Statement through an appropriate and readily accessible online means 
> that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
> business practices to the extent required by the CA's selected audit scheme 
> (see Section 8.1).
> 
> Effective as of 31 May 2018, the Certificate Policy and/or Certification 
> Practice Statement MUST be structured in accordance with RFC 3647. Prior to 
> 31 May 2018, the Certificate Policy and/or Certification Practice Statement 
> MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
> Certificate Policy and/or Certification Practice Statement MUST include all 
> material required by RFC 3647 or, if structured as such, RFC 2527."
> 
> 
> 
> This ballot modifies the "Guidelines for the Issuance and Management of 
> Extended Validation Certificates" as follows, based on Version 1.6.6:
> 
> In Section 8.2.2, replace the text:
> "Each CA MUST publicly disclose their EV Policies through an appropriate and 
> readily accessible online means that is available on a 24x7 basis.  The CA is 
> also REQUIRED to publicly disclose its CA business practices as required by 
> WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
> MUST be structured in accordance with either RFC 2527 or RFC 3647."
> 
> With the following:
> "Each CA MUST publicly disclose its Certificate Policy and/or Certification 
> Practice Statement through an appropriate and readily accessible online means 
> that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
> business practices to the extent required by the CA's selected audit scheme 
> (see Section 17.1).
> 
> Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
> Practice Statement MUST be structured in accordance with RFC 3647. Prior to 
> 31 May 2018, the CA's Certificate Policy and/or Certification Practice 
> Statement MUST be structured in accordance with either RFC 2527 or RFC 3647. 
> The Certificate Policy and/or Certification Practice Statement MUST include 
> all material required by RFC 3647 or, if structured as such, RFC 2527."
> 
> -- MOTION ENDS --
> 
> The procedure for approval of this ballot is as follows:
> 
> Discussion (7 to 14 days)
> Start Time: 2017-12-07 22:00:00 UTC
> End Time: 2017-12-14 22:00:00 UTC
> 
> Vote for approval (7 days)
> Start Time: 2017-12-14 22:00:00 UTC
> End Time: 2017-12-21 22:00:00 UTC
> 
> Votes must be cast by posting an on-list reply to this thread on the Public 
> list. A vote in favor of the motion must indicate a clear 'yes' in the 
> response. A vote against must indicate a clear 'no' in the response. A vote 
> to abstain must indicate a clear 'abstain' in the response. Unclear responses 
> will not be counted. The latest vote received from any representative of a 
> voting member before the close of the voting period will be counted. Voting 
>

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-18 Thread Dimitris Zacharopoulos via Public 


HARICA votes "yes" to ballot 217.

Dimitris.

On 7/12/2017 6:52 μμ, Ryan Sleevi via Public wrote:

*Ballot 217: Sunset RFC 2527*

Purpose of Ballot: The Baseline Requirements and Extended Validation 
Guidelines require that CA's disclosures of the Certificate Policy 
and/or Certification Practice Statements include all of the material 
required by either RFC 2527 or RFC 3647 and structured in accordance 
with RFC 2527 or RFC 3647.


RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 
3647 in 2003. This sunsets the use of RFC 2527, ensuring that CAs' 
disclosures will follow a consistent pattern across the industry, 
facilitating easier review by Subscribers, Browsers, and the broader 
community. Based upon Member feedback, 6 months is provided for CAs to 
review and update their CP/CPS documents.


This motion aligns the language to be consistent between the BRs and 
the EVGs. For the benefit of minimal changes, this aligns the existing 
language through duplication, rather than attempting to incorporate 
the BRs by reference.


The following motion has been proposed by Ryan Sleevi of Google and 
endorsed by Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of 
HARICA.


*-- MOTION BEGINS --*

This ballot modifies the "Baseline Requirements for the Issuance and 
Management of Publicly-Trusted Certificates" as follows, based upon 
Version 1.5.1:


In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 8.1). The 
disclosures MUST include all the material required by RFC 2527 or RFC 
3647, and MUST be structured in accordance with either RFC 2527 or RFC 
3647. "


with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 8.1).


Effective as of 31 May 2018, the Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
RFC 3647. Prior to 31 May 2018, the Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
either RFC 2527 or RFC 3647. The Certificate Policy and/or 
Certification Practice Statement MUST include all material required by 
RFC 3647 or, if structured as such, RFC 2527."




This ballot modifies the "Guidelines for the Issuance and Management 
of Extended Validation Certificates" as follows, based on Version 1.6.6:


In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an 
appropriate and readily accessible online means that is available on a 
24x7 basis.  The CA is also REQUIRED to publicly disclose its CA 
business practices as required by WebTrust for CAs and ETSI TS 102 042 
and ETSI EN 319 411-1. The disclosures MUST be structured in 
accordance with either RFC 2527 or RFC 3647."


With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or 
Certification Practice Statement through an appropriate and readily 
accessible online means that is available on a 24x7 basis. The CA 
SHALL publicly disclose its CA business practices to the extent 
required by the CA's selected audit scheme (see Section 17.1).


Effective as of 31 May 2018, the CA's Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
RFC 3647. Prior to 31 May 2018, the CA's Certificate Policy and/or 
Certification Practice Statement MUST be structured in accordance with 
either RFC 2527 or RFC 3647. The Certificate Policy and/or 
Certification Practice Statement MUST include all material required by 
RFC 3647 or, if structured as such, RFC 2527."


*-- MOTION ENDS --*

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the 
Public list. A vote in favor of the motion must indicate a clear 'yes' 
in the response. A vote against must indicate a clear 'no' in the 
response. A vote to abstain must indicate a clear 'abstain' in the 
response. Unclear responses will not be counted. The latest vote 
received from any representative of a voting member before the close 
of the voting period will be counted. Voting members are listed here: 
https://cabforum.org/members/


In order for the motion to be adopted, two thirds or more of the votes 
cast by members in the CA category and greater than 50% of

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-17 Thread N. Atilla Biler via Public 
TURKTRUST votes “YES” on Ballot 217.

 

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Bruce Morton via 
Public
Sent: 15 Aralık 2017 Cuma 17:18
To: CA/Browser Forum Public Discussion List 
Subject: Re: [cabfpub] [EXTERNAL] Ballot 217: Sunset RFC 2527

 

Entrust votes Yes to ballot 217.

 

Bruce.

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: December 7, 2017 11:53 AM
To: CABFPub  >
Subject: [EXTERNAL][cabfpub] Ballot 217: Sunset RFC 2527

 

Ballot 217: Sunset RFC 2527

 

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

 

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

 

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference. 

 

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

 

-- MOTION BEGINS --

 

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

 

In Section 2.2, replace the text:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

 

with the following:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

 

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."

 

 

 

This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

 

In Section 8.2.2, replace the text:

"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

 

With the following:

"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

 

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

 

-- MOTION ENDS --


The procedure for approval of this ballot is as follows:

 

Discussion (7 to 14 days)

Start Time: 2017-12-07 22:00:00 UTC

End Time: 2017-12-14 22:00:00 UTC

 

Vote for approval (7 days)

Start Time: 2017-12-14 22:00:00 UTC

End Time: 2017-12-21 22:00:00 UTC

 

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in favor of the motion must

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-17 Thread Ryan Sleevi via Public 
On Thu, Dec 7, 2017 at 11:52 AM, Ryan Sleevi  wrote:

> *Ballot 217: Sunset RFC 2527*
>

Google votes YES
___
Public mailing list
Public@cabforum.org
https://cabforum.org/mailman/listinfo/public

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-16 Thread 陳立群 via Public 
Chunghwa Telecom Co., Ltd.  votes “Yes” 

 

Sincerely Yours,

 

Li-Chun Chen

 

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Bruce Morton via 
Public
Sent: Friday, December 15, 2017 10:18 PM
To: CA/Browser Forum Public Discussion List
Subject: [外部郵件] Re: [cabfpub] [EXTERNAL] Ballot 217: Sunset RFC 2527

 

Entrust votes Yes to ballot 217.

 

Bruce.

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: December 7, 2017 11:53 AM
To: CABFPub 
Subject: [EXTERNAL][cabfpub] Ballot 217: Sunset RFC 2527

 

Ballot 217: Sunset RFC 2527

 

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

 

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

 

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference. 

 

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

 

-- MOTION BEGINS --

 

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

 

In Section 2.2, replace the text:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

 

with the following:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

 

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."

 

 

 

This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

 

In Section 8.2.2, replace the text:

"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

 

With the following:

"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

 

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

 

-- MOTION ENDS --


The procedure for approval of this ballot is as follows:

 

Discussion (7 to 14 days)

Start Time: 2017-12-07 22:00:00 UTC

End Time: 2017-12-14 22:00:00 UTC

 

Vote for approval (7 days)

Start Time: 2017-12-14 22:00:00 UTC

End Time: 2017-12-21 22:00:00 UTC

 

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-15 Thread Gervase Markham via Public 
On 07/12/17 10:52, Ryan Sleevi via Public wrote:
> *Ballot 217: Sunset RFC 2527*

Mozilla votes YES.

Gerv
___
Public mailing list
Public@cabforum.org
https://cabforum.org/mailman/listinfo/public

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-15 Thread Phillip via Public 
Comodo Security Solutions votes Yes to Ballot 217

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Doug Beattie via 
Public
Sent: Friday, December 15, 2017 1:55 PM
To: Ryan Sleevi <sle...@google.com>; CA/Browser Forum Public Discussion List 
<public@cabforum.org>
Subject: Re: [cabfpub] Ballot 217: Sunset RFC 2527

 

GlobalSign votes Yes to Ballot 217

 

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: Thursday, December 7, 2017 11:53 AM
To: CABFPub <public@cabforum.org <mailto:public@cabforum.org> >
Subject: [cabfpub] Ballot 217: Sunset RFC 2527

 

Ballot 217: Sunset RFC 2527

 

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

 

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

 

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference. 

 

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

 

-- MOTION BEGINS --

 

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

 

In Section 2.2, replace the text:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

 

with the following:

"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

 

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."

 

 

 

This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

 

In Section 8.2.2, replace the text:

"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

 

With the following:

"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

 

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

 

-- MOTION ENDS --


The procedure for approval of this ballot is as follows:

 

Discussion (7 to 14 days)

Start Time: 2017-12-07 22:00:00 UTC

End Time: 2017-12-14 22:00:00 UTC

 

Vote for approval (7 days)

Start Time: 2017-12-14 22:00:00 UTC

End Time: 2017-12-21 22:00:00 UTC

 

Votes

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-15 Thread Doug Beattie via Public 
GlobalSign votes Yes to Ballot 217

From: Public [mailto:public-boun...@cabforum.org] On Behalf Of Ryan Sleevi via 
Public
Sent: Thursday, December 7, 2017 11:53 AM
To: CABFPub 
Subject: [cabfpub] Ballot 217: Sunset RFC 2527

Ballot 217: Sunset RFC 2527

Purpose of Ballot: The Baseline Requirements and Extended Validation Guidelines 
require that CA's disclosures of the Certificate Policy and/or Certification 
Practice Statements include all of the material required by either RFC 2527 or 
RFC 3647 and structured in accordance with RFC 2527 or RFC 3647.

RFC 2527 is an obsolete RFC, published in 1999, and replaced by RFC 3647 in 
2003. This sunsets the use of RFC 2527, ensuring that CAs' disclosures will 
follow a consistent pattern across the industry, facilitating easier review by 
Subscribers, Browsers, and the broader community. Based upon Member feedback, 6 
months is provided for CAs to review and update their CP/CPS documents.

This motion aligns the language to be consistent between the BRs and the EVGs. 
For the benefit of minimal changes, this aligns the existing language through 
duplication, rather than attempting to incorporate the BRs by reference.

The following motion has been proposed by Ryan Sleevi of Google and endorsed by 
Tim Hollebeek of DigiCert and Dimitris Zacharopoulos of HARICA.

-- MOTION BEGINS --

This ballot modifies the "Baseline Requirements for the Issuance and Management 
of Publicly-Trusted Certificates" as follows, based upon Version 1.5.1:

In Section 2.2, replace the text:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1). The disclosures MUST include all the material required by 
RFC 2527 or RFC 3647, and MUST be structured in accordance with either RFC 2527 
or RFC 3647. "

with the following:
"The CA SHALL publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 8.1).

Effective as of 31 May 2018, the Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the Certificate Policy and/or Certification Practice Statement MUST 
be structured in accordance with either RFC 2527 or RFC 3647. The Certificate 
Policy and/or Certification Practice Statement MUST include all material 
required by RFC 3647 or, if structured as such, RFC 2527."



This ballot modifies the "Guidelines for the Issuance and Management of 
Extended Validation Certificates" as follows, based on Version 1.6.6:

In Section 8.2.2, replace the text:
"Each CA MUST publicly disclose their EV Policies through an appropriate and 
readily accessible online means that is available on a 24x7 basis.  The CA is 
also REQUIRED to publicly disclose its CA business practices as required by 
WebTrust for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.  The disclosures 
MUST be structured in accordance with either RFC 2527 or RFC 3647."

With the following:
"Each CA MUST publicly disclose its Certificate Policy and/or Certification 
Practice Statement through an appropriate and readily accessible online means 
that is available on a 24x7 basis. The CA SHALL publicly disclose its CA 
business practices to the extent required by the CA's selected audit scheme 
(see Section 17.1).

Effective as of 31 May 2018, the CA's Certificate Policy and/or Certification 
Practice Statement MUST be structured in accordance with RFC 3647. Prior to 31 
May 2018, the CA's Certificate Policy and/or Certification Practice Statement 
MUST be structured in accordance with either RFC 2527 or RFC 3647. The 
Certificate Policy and/or Certification Practice Statement MUST include all 
material required by RFC 3647 or, if structured as such, RFC 2527."

-- MOTION ENDS --

The procedure for approval of this ballot is as follows:

Discussion (7 to 14 days)
Start Time: 2017-12-07 22:00:00 UTC
End Time: 2017-12-14 22:00:00 UTC

Vote for approval (7 days)
Start Time: 2017-12-14 22:00:00 UTC
End Time: 2017-12-21 22:00:00 UTC

Votes must be cast by posting an on-list reply to this thread on the Public 
list. A vote in favor of the motion must indicate a clear 'yes' in the 
response. A vote against must indicate a clear 'no' in the response. A vote to 
abstain must indicate a clear 'abstain' in the response. Unclear responses will 
not be counted. The latest vote received from any representative of a voting 
member before the close of the voting period will be counted. Voting members 
are listed here: https://cabforum.org/members/

In order for

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-15 Thread Ben Wilson via Public 
DigiCert votes "Yes" on Ballot 217

 

 

On 7 Dec 2017, at 16:52, Ryan Sleevi via Public  > wrote:

 

Ballot 217: Sunset RFC 2527

 

Purpose of Ballot: The Baseline Requirements and Extended Validation
Guidelines require that CA's disclosures of the Certificate Policy and/or
Certification Practice Statements include all of the material required by
either RFC 2527 or RFC 3647 and structured in accordance with RFC 2527 or
RFC 3647.

 



smime.p7s
Description: S/MIME cryptographic signature
___
Public mailing list
Public@cabforum.org
https://cabforum.org/mailman/listinfo/public

Re: [cabfpub] Ballot 217: Sunset RFC 2527

2017-12-15 Thread Neil Dunbar via Public 
TrustCor votes YES on Ballot 217

Regards,

Neil

> On 7 Dec 2017, at 16:52, Ryan Sleevi via Public  wrote:
> 
> Ballot 217: Sunset RFC 2527
> 
> Purpose of Ballot: The Baseline Requirements and Extended Validation 
> Guidelines require that CA's disclosures of the Certificate Policy and/or 
> Certification Practice Statements include all of the material required by 
> either RFC 2527 or RFC 3647 and structured in accordance with RFC 2527 or RFC 
> 3647.

___
Public mailing list
Public@cabforum.org
https://cabforum.org/mailman/listinfo/public