CA/Browser Forum posts
Posts by author Ben Wilson
Ballot 75 – NameConstraints Criticality Flag
June 8, 2012 by Ben WilsonBallot 75 – NameConstraints Criticality Flag (Passed) Motion Kathleen Wilson made the following motion, and Steve Roylance and Adam Langley endorsed it. Motion begins Effective immediately Erratum begins Delete the following text from the “Subordinate CA Certificate” section of both the Baseline Requirements Appendix B and EV Guidelines Appendix B: “All other fields and extensions MUST be set in accordance to RFC 5280.” AND replace it with the following: “F. nameConstraints (optional).
June 8, 2012 by Ben WilsonBallot 75 – NameConstraints Criticality Flag (Passed) Motion Kathleen Wilson made the following motion, and Steve Roylance and Adam Langley endorsed it. Motion begins Effective immediately Erratum begins Delete the following text from the “Subordinate CA Certificate” section of both the Baseline Requirements Appendix B and EV Guidelines Appendix B: “All other fields and extensions MUST be set in accordance to RFC 5280.” AND replace it with the following: “F. nameConstraints (optional).
Ballot 77 – Emergency Extension of IPR Requirements
June 7, 2012 by Ben WilsonBallot 77 – Emergency Extension of IPR Requirements (Passed) Motion Jeremy Rowley made the following motion, and Kirk Hall and Robin Alden endorsed it: The Forum’s IPR Policy requires each member to sign the IPR agreement and disclose all IP assets containing an Essential Claim (as defined in the IPR) on or before June 7, 2012. A failure to comply results in the loss of forum membership. The fact that many key members have not had sufficient time to review and sign the IPR agreement will likely result in a low participation during the face-to-face in Norway and a significant delay in the discussion and adoption of on-going Forum work product.
June 7, 2012 by Ben WilsonBallot 77 – Emergency Extension of IPR Requirements (Passed) Motion Jeremy Rowley made the following motion, and Kirk Hall and Robin Alden endorsed it: The Forum’s IPR Policy requires each member to sign the IPR agreement and disclose all IP assets containing an Essential Claim (as defined in the IPR) on or before June 7, 2012. A failure to comply results in the loss of forum membership. The fact that many key members have not had sufficient time to review and sign the IPR agreement will likely result in a low participation during the face-to-face in Norway and a significant delay in the discussion and adoption of on-going Forum work product.
Ballot 74 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements
May 31, 2012 by Ben WilsonBallot 74 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements (Quorum not met) Motion Jeremy Rowley made the following motion, and Dean Coclin and Richard Smith endorsed it: … Motion begins…. Effective immediately. Erratum begins A. Replace the definition of “Domain Authorization” in Section 4 of the Baseline Requirements with the following: “Domain Authorization Document: Documentation provided by, or a CA’s documentation of a communication with, a Domain Name Registrar, the Domain Name Registrant, or the person or entity listed in WHOIS as the Domain Name Registrant (including any private, anonymous, or proxy registration service) attesting to the authority of an Applicant to request a Certificate for a specific Domain Namespace.
May 31, 2012 by Ben WilsonBallot 74 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements (Quorum not met) Motion Jeremy Rowley made the following motion, and Dean Coclin and Richard Smith endorsed it: … Motion begins…. Effective immediately. Erratum begins A. Replace the definition of “Domain Authorization” in Section 4 of the Baseline Requirements with the following: “Domain Authorization Document: Documentation provided by, or a CA’s documentation of a communication with, a Domain Name Registrar, the Domain Name Registrant, or the person or entity listed in WHOIS as the Domain Name Registrant (including any private, anonymous, or proxy registration service) attesting to the authority of an Applicant to request a Certificate for a specific Domain Namespace.
Ballot 72 – Reorganize EV Documents
May 29, 2012 by Ben WilsonBallot 72 – Reorganize EV Documents (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Simon Labram and Rich Smith endorsed it: Motion begins The Forum adopts, with immediate effect, the document entitled “Guidelines For The Issuance And Management Of Extended Validation Certificates, Version 1.4, Draft 04” as Version 1.4 of the EV Guidelines. The Forum also adopts, with immediate effect, the document entitled “Guidelines for the Issuance and Management of Extended Validation Code Signing Certificates” as Version 1.
May 29, 2012 by Ben WilsonBallot 72 – Reorganize EV Documents (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Simon Labram and Rich Smith endorsed it: Motion begins The Forum adopts, with immediate effect, the document entitled “Guidelines For The Issuance And Management Of Extended Validation Certificates, Version 1.4, Draft 04” as Version 1.4 of the EV Guidelines. The Forum also adopts, with immediate effect, the document entitled “Guidelines for the Issuance and Management of Extended Validation Code Signing Certificates” as Version 1.
Ballot 73 – Public Mail-List
May 11, 2012 by Ben WilsonBallot 73 – Public Mail-List (Passed Unanimously) Motion Tim Moses made the following motion, and Eddy Nigg and Gerv Markham endorsed it: Motion begins The Forum requests the list manager to establish a new Forum mail list called . Current subscribers to the “management” mail list should be subscribed to the list with no action required on their part. Forum members (both voting and observing) should be allowed to post to the list.
May 11, 2012 by Ben WilsonBallot 73 – Public Mail-List (Passed Unanimously) Motion Tim Moses made the following motion, and Eddy Nigg and Gerv Markham endorsed it: Motion begins The Forum requests the list manager to establish a new Forum mail list called . Current subscribers to the “management” mail list should be subscribed to the list with no action required on their part. Forum members (both voting and observing) should be allowed to post to the list.
Ballot 71 – Auditor Qualification Requirements
May 8, 2012 by Ben WilsonBallot 71 – Auditor Qualification Requirements (Passed) Motion Tim Moses made the following motion, and Inigo Barreira and Ben Wilson endorsed it: Motion begins Effective 1 Jan 2013: Erratum begins In the Baseline requirements v1.0 A. In Section 3 (References), add: ETSI Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment – General Requirements and Guidance, available at: http://www.etsi.org/deliver/etsi_ts/119400_119499/119403/01.01.01_60/ts_119403v010101p.pdf Change the WebTrust reference to: WebTrust for Certification Authorities Version 2.
May 8, 2012 by Ben WilsonBallot 71 – Auditor Qualification Requirements (Passed) Motion Tim Moses made the following motion, and Inigo Barreira and Ben Wilson endorsed it: Motion begins Effective 1 Jan 2013: Erratum begins In the Baseline requirements v1.0 A. In Section 3 (References), add: ETSI Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment – General Requirements and Guidance, available at: http://www.etsi.org/deliver/etsi_ts/119400_119499/119403/01.01.01_60/ts_119403v010101p.pdf Change the WebTrust reference to: WebTrust for Certification Authorities Version 2.
Ballot 70 – EV Code Signing Identifier
May 8, 2012 by Ben WilsonBallot 70 – EV Code Signing Identifier (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Tom Albertson and Bruce Morton endorsed it: … Motion begins…. Effective immediately. Erratum begins DELETE the following text from the EV Guidelines Appendix H: “(3) Certificate Content. EV Code Signing Certificates MUST meet the minimum content requirements of Section 8.1 and Appendix B -Extensions for EV Certificates Intended for use with SSL/TLS – of these Guidelines, except that the Domain Name SHALL be omitted and the keyUsage extension SHALL be set as follows: “(A) keyUsage.
May 8, 2012 by Ben WilsonBallot 70 – EV Code Signing Identifier (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Tom Albertson and Bruce Morton endorsed it: … Motion begins…. Effective immediately. Erratum begins DELETE the following text from the EV Guidelines Appendix H: “(3) Certificate Content. EV Code Signing Certificates MUST meet the minimum content requirements of Section 8.1 and Appendix B -Extensions for EV Certificates Intended for use with SSL/TLS – of these Guidelines, except that the Domain Name SHALL be omitted and the keyUsage extension SHALL be set as follows: “(A) keyUsage.
CA/Browser Forum Publishes Submissions
April 15, 2012 by Ben WilsonAll responses that the CA/Browser Forum received from the call for position papers and statements of interest on organizational reform have been published to the Web site: Organizational Reform Submissions
April 15, 2012 by Ben WilsonAll responses that the CA/Browser Forum received from the call for position papers and statements of interest on organizational reform have been published to the Web site: Organizational Reform Submissions
Ballot 67 – Adopt IPR Policy
April 6, 2012 by Ben WilsonBallot 67 – Adopt IPR Policy (Passed) Motion Jeremy Rowley made the following motion, and Gervase Markham and Dean Coclin endorsed it: Motion begins As of April 8, 2012 (“Effective Date”), the CA/Browser Forum adopts Rev. 0_99.2 of ‘CA/Browser Forum Intellectual Property Rights Policy’ and the ‘CAB Forum IPR Policy Agreement’ – available at: and respectively, as v1.0 of its ‘IPR Policy’ and ‘IPR Agreement’, respectively. Members have 60 days from the Effective Date to sign the IPR Agreement and comply with the IPR Policy’s disclosure requirements for all previously enacted requirements, including the Baseline Requirements version 1.
April 6, 2012 by Ben WilsonBallot 67 – Adopt IPR Policy (Passed) Motion Jeremy Rowley made the following motion, and Gervase Markham and Dean Coclin endorsed it: Motion begins As of April 8, 2012 (“Effective Date”), the CA/Browser Forum adopts Rev. 0_99.2 of ‘CA/Browser Forum Intellectual Property Rights Policy’ and the ‘CAB Forum IPR Policy Agreement’ – available at: and respectively, as v1.0 of its ‘IPR Policy’ and ‘IPR Agreement’, respectively. Members have 60 days from the Effective Date to sign the IPR Agreement and comply with the IPR Policy’s disclosure requirements for all previously enacted requirements, including the Baseline Requirements version 1.