Based on comments received during -unfortunately- the voting period,
it appears that more attention to detail like the case of the
section headings, punctuation marks, etc need to be carefully
reviewed before approving with this ballot.
I would like to recommend Members to change their vote to "no" so
that the ballot fails and we can re-introduce it after we resolve
these issues.
Thank you,
Dimitris.
On 5/5/2024 11:24 π.μ., Dimitris
Zacharopoulos (HARICA) via Servercert-wg wrote:
Voting begins for ballot SC-74.
SC-74 - Clarify
CP/CPS structure according to RFC 3647
Summary
The TLS Baseline Requirements
require in section 2.2 that:
"The Certificate Policy
and/or Certification Practice Statement MUST be structured in
accordance with RFC 3647 and MUST include all material
required by RFC 3647."
The intent of this language was
to ensure that all CAs' CP and/or CPS documents contain a
similar structure, making it easier to review and compare
against the BRs. However, there was some ambiguity as to the
actual structure that CAs should follow. After several
discussions in the SCWG Public Mailing List and F2F
meetings, it was agreed that more clarity should be added to the
existing requirement, pointing to the outline described in
section 6 of RFC 3647.
The following motion has been
proposed by Dimitris Zacharopoulos (HARICA) and endorsed by
Aaron Poulsen (Amazon) and Tim Hollebeek (Digicert).
You can view the github pull
request representing this ballot here.
Motion Begins
MODIFY the "Baseline
Requirements for the Issuance and Management of Publicly-Trusted
TLS Server Certificates" based on Version 2.0.4 as specified in
the following redline:
Motion Ends
This ballot proposes a Final
Maintenance Guideline. The procedure for approval of this ballot
is as follows:
Discussion (at least 7
days)
- Start time: 2024-04-25 16:30:00 UTC
- End time: on or after 2024-05-02 16:30:00 UTC
Vote for approval (7 days)
- Start time: 2024-05-05 8:30:00 UTC
- End time: 2024-05-12 8:30:00 UTC
_______________________________________________
Servercert-wg mailing list
[email protected]
https://lists.cabforum.org/mailman/listinfo/servercert-wg
_______________________________________________Servercert-wg mailing list[email protected]https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.cabforum.org_mailman_listinfo_servercert-2Dwg&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=-bX5hBm1IdRDykQ-dBR8tsFRCM4v1VXUyG7RZa2WqPY&m=WlMjnLM2C6PyZQPRyPLh2kwB4B2Jq4ST8f6G37E_L98PsUBZYvL9CKYXTr5TZ5bR&s=GYlSkS34rWaZZQR196WlL7Xzsak_KUXiu44RSQfxUbw&e=
smime.p7s