iTrusChina votes YES on ballot SC-077
From: Clint Wilson via Servercert-wg
Date: 2024-08-14 01:05
To: ServerCert CA/BF
Subject: [Servercert-wg] VOTING Period Begins - Ballot SC-077: Update WebTrust
Audit name in Section 8.4 and References
Purpose of Ballot
CPA Canada has separated the audit criteria which map to the Network and
Certificate System Security Requirements (NCSSRs) from the audit criteria which
map to the TLS Baseline Requirements (TBRs). As a result, the requirements in
Section 8.4 are out of date for audits which use the updated/separated audit
criteria. However, we also need to ensure the combined audit criteria are able
to be used until fully deprecated by CPA Canada and/or Root Programs stop
accepting them.
This ballot modifies Section 8.4 to allow for a CA to be audited against either:
WebTrust Principles and Criteria for Certification Authorities – SSL Baseline
with Network Security; or
WebTrust Principles and Criteria for Certification Authorities – SSL Baseline
AND WebTrust Principles and Criteria for Certification Authorities – Network
Security
Motion
The following motion has been proposed by Clint Wilson (Apple) and endorsed by
Dimitris Zacharopoulos (HARICA) and Trevoli Ponds-White (Amazon)
You can view and comment on the Github pull request representing this ballot
here.
Motion Begins
MODIFY the "Baseline Requirements for the Issuance and Management of
Publicly-Trusted TLS Server Certificates" ("TLS Baseline Requirements") based
on Version 2.0.5 as specified in the following redline:
https://github.com/cabforum/servercert/compare/20af1b271f2b689344ae353d3e78dc6b772199db...a9d3e3b6e514cf8b4d44ace625a447108c04a91c
Motion Ends
This ballot proposes a Final Maintenance Guideline. The procedure for approval
of this ballot is as follows:
Discussion (at least 7 days)
Start time: August 6, 2024 17:00 UTC
End time: on or after August 13, 2024 17:00 UTC
Vote for approval (7 days)
Start time: August 13, 2024 17:00 UTC
End time: August 20, 2024 17:00 UTC
_______________________________________________
Servercert-wg mailing list
[email protected]
https://lists.cabforum.org/mailman/listinfo/servercert-wg
