CA/Browser Forum posts
Posts by author Ben Wilson
Forum Discussions are Now Public
August 2, 2012 by Ben WilsonThe CA/Browser Forum has created a public mailing list, intended to be used for normal CA/Browser Forum discussions, which can be read (but not posted to) by interested parties. Visit the list’s web page to sign up.
August 2, 2012 by Ben WilsonThe CA/Browser Forum has created a public mailing list, intended to be used for normal CA/Browser Forum discussions, which can be read (but not posted to) by interested parties. Visit the list’s web page to sign up.
Ballot 80 – Response for Non-Issued Certificates
August 2, 2012 by Ben WilsonBallot 80 – Response for Non-Issued Certificates (Passed) Motion Yngve Pettersen made the following motion and Ben Wilson and Carsten Dahlenkamp endorsed it: … Motion begins…. Effective 1 Feb 2013 Erratum begins Insert a new section at the end of section 13.2 of the Baseline Requirements with the following heading and text: “13.2.6 Response for non-issued certificates If the OCSP responder receives a request for status of a certificate that has not been issued, then the responder SHOULD NOT respond with a “good” status.
August 2, 2012 by Ben WilsonBallot 80 – Response for Non-Issued Certificates (Passed) Motion Yngve Pettersen made the following motion and Ben Wilson and Carsten Dahlenkamp endorsed it: … Motion begins…. Effective 1 Feb 2013 Erratum begins Insert a new section at the end of section 13.2 of the Baseline Requirements with the following heading and text: “13.2.6 Response for non-issued certificates If the OCSP responder receives a request for status of a certificate that has not been issued, then the responder SHOULD NOT respond with a “good” status.
Ballot 81 – Required Format for Amendments to Existing Standards or Requirements
August 1, 2012 by Ben WilsonThis ballot was withdrawn.
August 1, 2012 by Ben WilsonThis ballot was withdrawn.
Ballot 82 – Extend IPR Introduction Timetable
July 31, 2012 by Ben WilsonBallot 82 – Extend IPR Introduction Timetable (Rejected) Motion John Espinoza made the following motion and Tim Moses and Jeremy Rowley endorsed it: … Motion begins…. The CAB Forum hereby suspends the IPR Agreement and Policy from going into effect on August 1, 2012, as currently scheduled. Such suspension will endure until such time as the CAB Forum’s governance revisions are complete. Completion of the CAB Forum’s governance revisions will be deemed to have occurred in the event of a final, formal vote under the normal voting procedures of the CAB Forum then in effect where such vote concludes in the approval of a new Guideline for organization governance or other form of organization governance reform agreement.
July 31, 2012 by Ben WilsonBallot 82 – Extend IPR Introduction Timetable (Rejected) Motion John Espinoza made the following motion and Tim Moses and Jeremy Rowley endorsed it: … Motion begins…. The CAB Forum hereby suspends the IPR Agreement and Policy from going into effect on August 1, 2012, as currently scheduled. Such suspension will endure until such time as the CAB Forum’s governance revisions are complete. Completion of the CAB Forum’s governance revisions will be deemed to have occurred in the event of a final, formal vote under the normal voting procedures of the CAB Forum then in effect where such vote concludes in the approval of a new Guideline for organization governance or other form of organization governance reform agreement.
2012-07-26 Minutes
July 26, 2012 by Ben WilsonNotes of meeting CAB Forum 26 July 2012 Version 1 Present Tim Moses, Wayne Thayer, Atsushi Inaba, Brad Hill, Dean Coclin, Eddy Nigg, Bruce Morton, Geoff Keating, Rick Andrews, Renne Rodriguez, Yngve Pettersen, Jeremy Rowley, Carsten Dahlenkamp Agenda review The agenda was accepted as published. Minutes of meetings on 12 July The minutes were accepted as published. Ballots status Ballot 80 opens for voting later today. Ballot 82 closes next Tuesday.
July 26, 2012 by Ben WilsonNotes of meeting CAB Forum 26 July 2012 Version 1 Present Tim Moses, Wayne Thayer, Atsushi Inaba, Brad Hill, Dean Coclin, Eddy Nigg, Bruce Morton, Geoff Keating, Rick Andrews, Renne Rodriguez, Yngve Pettersen, Jeremy Rowley, Carsten Dahlenkamp Agenda review The agenda was accepted as published. Minutes of meetings on 12 July The minutes were accepted as published. Ballots status Ballot 80 opens for voting later today. Ballot 82 closes next Tuesday.
Ballot 79 – Mailing List Usage
July 25, 2012 by Ben WilsonBallot 79 – Mailing List Usage (Passed) Gervase Markham made the following motion and Chris Palmer and Eddy Nigg endorsed it: Wishing to establish guidelines for the use of the new public mailing list, … Motion begins…. Effective immediately, the Forum resolves that: Draft and final agenda for Forum meetings (both virtual and in-person, and including any sub-groups or committees) will be posted to the public list. Draft minutes of Forum meetings (both virtual and in-person, and including any sub-groups or committees) will be posted to the private list to allow members to make sure they are being correctly reported.
July 25, 2012 by Ben WilsonBallot 79 – Mailing List Usage (Passed) Gervase Markham made the following motion and Chris Palmer and Eddy Nigg endorsed it: Wishing to establish guidelines for the use of the new public mailing list, … Motion begins…. Effective immediately, the Forum resolves that: Draft and final agenda for Forum meetings (both virtual and in-person, and including any sub-groups or committees) will be posted to the public list. Draft minutes of Forum meetings (both virtual and in-person, and including any sub-groups or committees) will be posted to the private list to allow members to make sure they are being correctly reported.
Governance Proposals Published, Advancing Toward Adoption
July 5, 2012 by Ben WilsonDuring last week’s meeting in Norway, the CA/Browser Forum agreed to advance four governance proposal through a voting process that will result in the decision to keep the current structire in place, or to adopt one of the four new proposals. The proposals are published here for public review and comment: DigiCert Microsoft PayPal Trend Micro Please send comments to . Please note that this is a moderated mailing list normally available for posting only to CA/Browser Forum members, but posts on this topic from non-forum members will be manually approved.
July 5, 2012 by Ben WilsonDuring last week’s meeting in Norway, the CA/Browser Forum agreed to advance four governance proposal through a voting process that will result in the decision to keep the current structire in place, or to adopt one of the four new proposals. The proposals are published here for public review and comment: DigiCert Microsoft PayPal Trend Micro Please send comments to . Please note that this is a moderated mailing list normally available for posting only to CA/Browser Forum members, but posts on this topic from non-forum members will be manually approved.
Ballot 78 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements
June 15, 2012 by Ben WilsonBallot 78 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Dean Coclin and Richard Smith endorsed it: … Motion begins…. Effective immediately. Erratum begins A. Replace the definition of “Domain Authorization” in Section 4 of the Baseline Requirements with the following: “Domain Authorization Document: Documentation provided by, or a CA’s documentation of a communication with, a Domain Name Registrar, the Domain Name Registrant, or the person or entity listed in WHOIS as the Domain Name Registrant (including any private, anonymous, or proxy registration service) attesting to the authority of an Applicant to request a Certificate for a specific Domain Namespace.
June 15, 2012 by Ben WilsonBallot 78 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Dean Coclin and Richard Smith endorsed it: … Motion begins…. Effective immediately. Erratum begins A. Replace the definition of “Domain Authorization” in Section 4 of the Baseline Requirements with the following: “Domain Authorization Document: Documentation provided by, or a CA’s documentation of a communication with, a Domain Name Registrar, the Domain Name Registrant, or the person or entity listed in WHOIS as the Domain Name Registrant (including any private, anonymous, or proxy registration service) attesting to the authority of an Applicant to request a Certificate for a specific Domain Namespace.
Ballot 76 – Public Review of Network Security Controls
June 12, 2012 by Ben WilsonBallot 76 – Public Review of Network Security Controls (Passed) Motion Ben Wilson made the following motion, and Eddy Nigg and Gerv Markham endorsed it: Motion begins Members of the CAB Forum have drafted Network Security Requirements, dated May 14,2012, and setting a baseline level of network security for all certification authorities that operate or manage a root certificate embedded as a trust anchor in publicly distributed browser software. The document is available for review here:
June 12, 2012 by Ben WilsonBallot 76 – Public Review of Network Security Controls (Passed) Motion Ben Wilson made the following motion, and Eddy Nigg and Gerv Markham endorsed it: Motion begins Members of the CAB Forum have drafted Network Security Requirements, dated May 14,2012, and setting a baseline level of network security for all certification authorities that operate or manage a root certificate embedded as a trust anchor in publicly distributed browser software. The document is available for review here: