CA/Browser Forum
Home » All CA/Browser Forum Posts » Ballot 37 – Another QGIS

Ballot 37 – Another QGIS

Ballot 37 – Another QGIS (Passed Unanimously)

Motion

Tim Moses made the following motion, and Robin Alden and Jay Schiavo endorsed it:

Rules for verifying an Applicant’s place of business address are specified in Section 10.4.1 with reference to Section 10.2. Section 10.2.2 is transcribed here for the reader’s convenience. “10.2.2 Acceptable Method of Verification (1) Private Organization Subjects: All items listed in Section 10.2.1(1) MUST be verified directly with, or obtained directly from, the Incorporating or Registration Agency in the Applicant’s Jurisdiction of Incorporation or Registration. Such verification MAY be through use of a Qualified Government Information Source (QGIS) operated by, or on behalf of, the Incorporating or Registration Agency, or by direct contact with the Incorporating or Registration Agency in person or via mail, e-mail, Web address, or telephone, using an address or phone number obtained from a Qualified Independent Information Source (QIIS).”

A QGIS, other than one “operated by, or on behalf of, the Incorporating or Registration Agency” (such as the SEC), should be an acceptable alternative to the QIIS and QTIS that are allowed by Section 10.4.1.

Motion begins

Effective immediately, delete: “10.4.1 Address of Applicant’s Place of Business … (A) Place of Business in the Country of Incorporation or Registration (i) For Applicants whose Place of Business is in the same country as the Applicant’s Jurisdiction of Incorporation or Registration and whose Place of Business is NOT the same as that indicated in the relevant Qualified Government Information Source used in Section 10.2 to verify legal existence: (1) For Applicants listed at the same Place of Business address in the current version of either at least one QIIS or a QTIS, the CA MUST confirm that the Applicant’s address, as listed in the EV Certificate Request, is a valid business address for the Applicant or a Parent/Subsidiary Company by reference to such QIIS or QTIS, and MAY rely on the Applicant’s representation that such address is its Place of Business;”

And, insert: “10.4.1 Address of Applicant’s Place of Business … (A) Place of Business in the Country of Incorporation or Registration (i) For Applicants whose Place of Business is in the same country as the Applicant’s Jurisdiction of Incorporation or Registration and whose Place of business is NOT the same as that indicated in the Qualified Government Information Source used in Section 10.2 to verify legal existence: (1) For Applicants listed at the same Place of Business address in the current version of either at least one QGIS (other than that used to verify legal existence), QIIS or QTIS, the CA MUST confirm that the Applicant’s address, as listed in the EV Certificate Request, is a valid business address for the Applicant or a Parent/Subsidiary Company by reference to such QGIS, QIIS or QTIS, and MAY rely on the Applicant’s representation that such address is its Place of Business;”

Motion ends

The ballot review period comes into effect at 2100 UTC on 19 Mar ’10 and will close at 2100 UTC on 26 Mar ’10. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2100 UTC on 6 Apr ’10.

Votes must be cast by “reply all’ to this email.

A vote in favour of the motion must indicate a clear ‘yes’ in the response. A vote against must indicate a clear ‘no’ in the response. A vote to abstain must indicate a clear ‘abstain’ in the response. Unclear responses will not be counted.

The latest vote received from any representative of a voting member before the close of the voting period will be counted.

Latest releases
Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.7 - Ballot SMC09 - Nov 25, 2024

This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).