You don’t want to call out “reasonableness” unless you’re actually going to let people use their discretion.
The first new sentence, as I read it, could be rewritten as: “All statements of time periods SHALL be taken to mean exactly that time period, and not one microsecond more.” That is very clear, but it is not the only reasonable interpretation. Claiming the “minimum” interpretation is the only “reasonable” one is a bit more opinionated and pejorative than is necessary. It also doesn’t add anything. -Tim From: Servercert-wg <[email protected]> On Behalf Of Aaron Gable via Servercert-wg Sent: Thursday, January 4, 2024 1:06 PM To: CA/B Forum Server Certificate WG Public Discussion List <[email protected]> Subject: Re: [Servercert-wg] Seeking endorsers: Ballot SC-XX: Measure all hours and days to the second Hi all, Thanks for the great discussion in the ServerCert WG call this morning! I have updated this draft ballot to attempt to use Clint's language around interpreting time periods to be their minimum value. Please take a look! https://github.com/cabforum/servercert/pull/470/files <https://url.avanan.click/v2/___https:/github.com/cabforum/servercert/pull/470/files___.YXAzOmRpZ2ljZXJ0OmE6bzoyMjY5YTgxZDcxNTE0ZGU4YjBkZjc5ODk0ZGZiYWZjMzo2OjY5ZjY6M2RkYjVhYjI4NTY0ZTJkOTJjZGI0YWE3MmUyZTk1ZWVmZDdlZmY3Yjg5NDczOTU2MTBhZTI1ODI5YjQzY2M3MzpoOkY> Thanks again, Aaron On Thu, Dec 21, 2023 at 9:49 AM Aaron Gable <[email protected] <mailto:[email protected]> > wrote: Hi all, As a result of this bugzilla incident <https://url.avanan.click/v2/___https:/bugzilla.mozilla.org/show_bug.cgi?id=1865080___.YXAzOmRpZ2ljZXJ0OmE6bzoyMjY5YTgxZDcxNTE0ZGU4YjBkZjc5ODk0ZGZiYWZjMzo2Ojc5MDk6N2Y5OWEwNTEwYTIxNGUyZjgwY2Q0NmJiMGQyY2I4MTcxZjMwN2QwZGY2MzA3NDMwZjJhOTRmM2U4ZTZkNDg3NjpoOkY> , and inspired by Ballot SC-52 <https://url.avanan.click/v2/___https:/github.com/cabforum/servercert/pull/327___.YXAzOmRpZ2ljZXJ0OmE6bzoyMjY5YTgxZDcxNTE0ZGU4YjBkZjc5ODk0ZGZiYWZjMzo2OjE5NGQ6ODZiZWM0ZDc1ZDI2YzRkNzM2OGIxMjFlZmY5N2UzOTU4ZjQ5NThjMGM5N2EyMGExYTE5OWIzMjc4ZGY3ZTRiYzpoOkY> which never came to a vote, I would like to re-propose that the Baseline Requirements clarify that all "hour" and "day" time periods are measured with 1-second precision, and do not refer to calendar days. They currently do this in two separate places (three, if you count the definition of Short-Lived Certificates). I believe it will benefit all readers to instead state this convention once at the beginning of the document, so that it is clear that it applies uniformly to all time periods measured in those units. The pull request can be viewed and commented on here: https://github.com/cabforum/servercert/pull/470 <https://url.avanan.click/v2/___https:/github.com/cabforum/servercert/pull/470___.YXAzOmRpZ2ljZXJ0OmE6bzoyMjY5YTgxZDcxNTE0ZGU4YjBkZjc5ODk0ZGZiYWZjMzo2OmZkOTE6ODM5YWFmMzkyYjM4OThmMTU3NmVjMjdlNTk2Y2ZjNWZhZDRmODZjOTQyNzcwY2FjMWQ3ZTU1ODRjOWU3YmRmYjpoOkY> The precise diff that will become the ballot redline if no changes are requested can be viewed here: https://github.com/cabforum/servercert/compare/90a98dc7c1131eaab01af411968aa7330d315b9b...c3e928e73caed8c8489ab5406127aad661b8a63e <https://url.avanan.click/v2/___https:/github.com/cabforum/servercert/compare/90a98dc7c1131eaab01af411968aa7330d315b9b...c3e928e73caed8c8489ab5406127aad661b8a63e___.YXAzOmRpZ2ljZXJ0OmE6bzoyMjY5YTgxZDcxNTE0ZGU4YjBkZjc5ODk0ZGZiYWZjMzo2OjdjNjQ6MTI0NDAzNTNlYjI5MGE4YTcxYmEzNzFjZjRmMWU1NGQzNmYwNGZhZDk0ZGM3OWNkM2VhMDE5MWZjYjU5MTRiNTpoOkY> I am seeking endorsers for this ballot. Thank you! Aaron
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Servercert-wg mailing list [email protected] https://lists.cabforum.org/mailman/listinfo/servercert-wg
