During last week’s meeting in Norway, the CA/Browser Forum agreed to advance four governance proposal through a voting process that will result in the decision to keep the current structire in place, or to adopt one of the four new proposals. The proposals are published here for public review and comment:   DigiCert Microsoft PayPal Trend Micro Please send comments …

Ballot 78 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Dean Coclin and Richard Smith endorsed it: … Motion begins…. Effective immediately. … Erratum begins … A. Replace the definition of “Domain Authorization” in Section 4 of the Baseline Requirements with …

Ballot 76 – Public Review of Network Security Controls (Passed) Motion Ben Wilson made the following motion, and Eddy Nigg and Gerv Markham endorsed it: Motion begins Members of the CAB Forum have drafted Network Security Requirements, dated May 14,2012, and setting a baseline level of network security for all certification authorities that operate or manage a root certificate embedded …

Ballot 75 – NameConstraints Criticality Flag (Passed) Motion Kathleen Wilson made the following motion, and Steve Roylance and Adam Langley endorsed it. Motion begins Effective immediately Erratum begins Delete the following text from the “Subordinate CA Certificate” section of both the Baseline Requirements Appendix B and EV Guidelines Appendix B: “All other fields and extensions MUST be set in accordance …

Ballot 77 – Emergency Extension of IPR Requirements (Passed) Motion Jeremy Rowley made the following motion, and Kirk Hall and Robin Alden endorsed it: The Forum’s IPR Policy requires each member to sign the IPR agreement and disclose all IP assets containing an Essential Claim (as defined in the IPR) on or before June 7, 2012. A failure to comply …

Ballot 74 – Updates to Domain and IP Validation, High Risk Requests, and Data Source in the Baseline Requirements (Quorum not met) Motion Jeremy Rowley made the following motion, and Dean Coclin and Richard Smith endorsed it: … Motion begins…. Effective immediately. … Erratum begins … A. Replace the definition of “Domain Authorization” in Section 4 of the Baseline Requirements …

Ballot 72 – Reorganize EV Documents (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Simon Labram and Rich Smith endorsed it: … Motion begins … The Forum adopts, with immediate effect, the document entitled “Guidelines For The Issuance And Management Of Extended Validation Certificates, Version 1.4, Draft 04” as Version 1.4 of the EV Guidelines. The Forum also …

Ballot 73 – Public Mail-List (Passed Unanimously) Motion Tim Moses made the following motion, and Eddy Nigg and Gerv Markham endorsed it: … Motion begins … The Forum requests the list manager to establish a new Forum mail list called cabfpub@cabforum.org. Current subscribers to the “management” mail list should be subscribed to the cabfpub@cabforum.org list with no action required on …

Ballot 71 – Auditor Qualification Requirements (Passed) Motion Tim Moses made the following motion, and Inigo Barreira and Ben Wilson endorsed it: Motion begins Effective 1 Jan 2013: Erratum begins … In the Baseline requirements v1.0 A. In Section 3 (References), add: ETSI Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment – General Requirements and Guidance, available at: …

Ballot 70 – EV Code Signing Identifier (Passed Unanimously) Motion Jeremy Rowley made the following motion, and Tom Albertson and Bruce Morton endorsed it: … Motion begins…. Effective immediately. … Erratum begins … DELETE the following text from the EV Guidelines Appendix H: “(3) Certificate Content. EV Code Signing Certificates MUST meet the minimum content requirements of Section 8.1 and …