<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">So, the general consensus is that automated system periods are expressed in days (e.g. password expiry), but that staff driven activities are expressed in calendar months (presumably to avoid possible clashes with weekends, public holidays, etc.)? I can get behind that.<div class=""><br class=""></div><div class="">I’m still a little unclear on why the password quality restrictions would only apply to accounts accessible from outside the controlling security zone. I mean - wouldn’t it be simpler to require that _all_ secure zone account passwords have a quality threshold and rotation time (including root passwords only usable from console)? Or is that introducing potentially controversial changes?</div><div class=""><br class=""></div><div class="">Cheers,</div><div class=""><br class=""></div><div class="">Neil</div><div class=""><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 10 Jul 2017, at 08:33, Dimitris Zacharopoulos via Netsec <<a href="mailto:netsec@cabforum.org" class="">netsec@cabforum.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="moz-cite-prefix" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><br class="">Here are some proposed changes for things that were repeated in previous F2F meetings (hopefully uncontroversial).<br class=""><br class=""><a class="moz-txt-link-freetext" href="https://github.com/cabforum/documents/pull/64/files?short_path=50fc941#diff-50fc941f7be640a0bf58764b83d5d9e7" style="color: rgb(149, 79, 114); text-decoration: underline;">https://github.com/cabforum/documents/pull/64/files?short_path=50fc941#diff-50fc941f7be640a0bf58764b83d5d9e7</a><br class=""><br class="">Ben pulled some other changes discussed at the Bilbao meeting but I don't know if all these changes are uncontroversial. Anyone can take a stab and commit new proposed changes, based on the Bilbao meeting.<br class=""><br class=""><br class="">Dimitris.<br class=""><br class=""><br class="">On 6/7/2017 7:26 μμ, Dimitris Zacharopoulos wrote:<br class=""></div><blockquote type="cite" cite="mid:011efd8a-1c34-003e-f377-af5e0b309946@it.auth.gr" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><br class=""><br class=""><div class="moz-cite-prefix">On 6/7/2017 4:35 μμ, Bowen, Peter wrote:<br class=""></div><blockquote type="cite" cite="mid:2BF8BD1D-D7F2-4696-A134-27CF5E36BC6C@amazon.com" class=""><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class="">Sorry for missing this email. The formatting looks good but has a couple of bugs. If you look at<span class="Apple-converted-space"> </span><a href="https://github.com/dzacharo/documents/blob/master/docs/NSR.md" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://github.com/dzacharo/documents/blob/master/docs/NSR.md</a>, you can see that it isn’t rendering quite right.<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class=""><o:p class=""> </o:p></span></div><ol start="1" type="1" style="margin-bottom: 0in; margin-top: 0in;" class=""><li class="MsoListParagraph" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext;">Your headings need a space between the # and the number. Otherwise it won’t be treated as a heading. I would also use ## or ###, as they are likely subheadings.</li></ol></div></blockquote><br class="">It did render ok on my client markdown editor but not on github. Fixed.<br class=""><br class=""><br class=""><blockquote type="cite" cite="mid:2BF8BD1D-D7F2-4696-A134-27CF5E36BC6C@amazon.com" class=""><div class="WordSection1" style="page: WordSection1;"><ol start="1" type="1" style="margin-bottom: 0in; margin-top: 0in;" class=""><li class="MsoListParagraph" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext;"><o:p class=""></o:p><br class=""></li><li class="MsoListParagraph" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext;">Under 2.15, the romanettes (i), (ii), and (iii) didn’t come out right</li></ol></div></blockquote><br class="">Fixed the numbering and replaced numbers to letters (which is the normative document according to Ben).<br class=""><br class=""><blockquote type="cite" cite="mid:2BF8BD1D-D7F2-4696-A134-27CF5E36BC6C@amazon.com" class=""><div class="WordSection1" style="page: WordSection1;"><ol start="1" type="1" style="margin-bottom: 0in; margin-top: 0in;" class=""><li class="MsoListParagraph" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext;"><o:p class=""></o:p><br class=""></li></ol><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class="">I would also suggest making two pull requests, one with the current doc converted to markdown (no changes) and then one with the proposed changes. That way there is a clear starting point and changes can be reviewed against a baseline.</span></div></div></blockquote><br class=""><a class="moz-txt-link-freetext" href="https://github.com/cabforum/documents/pull/63" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;">https://github.com/cabforum/documents/pull/63</a>.<br class=""><br class="">It needs a quick review and can be merged if it is ok. I will add the proposed changes after the merge and create a new pull request. Currently, if I commit a new change, it will be included in the existing pull request (63).<br class=""><br class="">Bruce, reviewing on github as a red-lined diff, is easy. You just need to select the file you want to review and then click on the "rich diff" display format. Here is a direct link of the proposed changes in rich diff format. Just note that the numbering WILL change to use lettered lists and not numbered lists, once the first pull request (of the current NSRs) is approved.<br class=""><br class=""><a class="moz-txt-link-freetext" href="https://github.com/dzacharo/documents/commit/601136b4f66c958de56c95288784e5efbb954fac?short_path=50fc941#diff-50fc941f7be640a0bf58764b83d5d9e7" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;">https://github.com/dzacharo/documents/commit/601136b4f66c958de56c95288784e5efbb954fac?short_path=50fc941#diff-50fc941f7be640a0bf58764b83d5d9e7</a><br class=""><br class=""><br class="">Cheers,<br class="">Dimitris.<br class=""><br class=""><br class=""><blockquote type="cite" cite="mid:2BF8BD1D-D7F2-4696-A134-27CF5E36BC6C@amazon.com" class=""><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class=""><o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class="">Thanks,<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class="">Peter<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: windowtext;" class=""><o:p class=""> </o:p></span></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 7/6/17, 6:24 AM, "Bruce Morton" <<a href="mailto:Bruce.Morton@entrustdatacard.com" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">Bruce.Morton@entrustdatacard.com</a>> wrote:<o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class="">I might not be git capable as I don’t understand the changes being proposed.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class="">Bruce.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(31, 73, 125);" class=""> </span><o:p class=""></o:p></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in;" class=""><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class=""><span style="color: windowtext;" class="">From:</span></b><span style="color: windowtext;" class=""><span class="Apple-converted-space"> </span>Dimitris Zacharopoulos [<a class="moz-txt-link-freetext" href="mailto:jimmy@it.auth.gr" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;">mailto:jimmy@it.auth.gr</a>]<span class="Apple-converted-space"> </span><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Monday, July 3, 2017 2:13 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Kirk Hall<span class="Apple-converted-space"> </span><a class="moz-txt-link-rfc2396E" href="mailto:Kirk.Hall@entrustdatacard.com" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;"><Kirk.Hall@entrustdatacard.com></a>; Ben Wilson<span class="Apple-converted-space"> </span><a class="moz-txt-link-rfc2396E" href="mailto:ben.wilson@digicert.com" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;"><ben.wilson@digicert.com></a><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span>Bruce Morton<span class="Apple-converted-space"> </span><a class="moz-txt-link-rfc2396E" href="mailto:Bruce.Morton@entrustdatacard.com" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;"><Bruce.Morton@entrustdatacard.com></a>; Peter Bowen<span class="Apple-converted-space"> </span><a class="moz-txt-link-rfc2396E" href="mailto:pzb@amzn.com" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;"><pzb@amzn.com></a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>[EXTERNAL]Re: Short term fix list</span><o:p class=""></o:p></div></div></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><p class="MsoNormal" style="margin: 0in 0in 12pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;"><br class="">I tried to dig into the "git world", to help with the discussion of changes to the NetSecurity Requirements.<br class=""><br class="">First of all, I converted the existing Network Security Requirements to markdown. Then, I made some changes which have been discussed in the last couple of years since I joined the forum and which I believe are uncontroversial.<br class=""><br class="">The result of this work is<span class="Apple-converted-space"> </span><a href="https://github.com/cabforum/documents/pull/62" moz-do-not-send="true" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://github.com/cabforum/documents/pull/62</a><br class=""><br class="">I might be terribly wrong in my git tasks<span class="Apple-converted-space"> </span><br class="">(fork "cabforum/documents" on my local repository, make changes and commit/push to my local repository, create pull request to "cabforum/documents" from my local repository),<span class="Apple-converted-space"> </span><br class=""><br class="">which is why I cc Peter to check if things were done properly and point me to the right direction of operations if I did something wrong.<br class=""><br class="">Ben, of course feel free to use any of the committed information to create a branch on the cabforum/documents repository (I don't think I have permissions to create branches and so on for that repo).<br class=""><br class=""><br class="">Thanks,<br class="">Dimitris.<br class=""><br class=""><br class=""><o:p class=""></o:p></p><div class=""><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 29/6/2017 7:42 μμ, Kirk Hall wrote:<o:p class=""></o:p></div></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Ben and Dimitris – if you can send an email with your short term fix list in (say) a week or even sooner, maybe we can get some discussion going<span class="Apple-converted-space"> </span><u class="">before</u><span class="Apple-converted-space"> </span>our next call.<o:p class=""></o:p></div></blockquote><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 12pt;" class=""> </span><o:p class=""></o:p></div></div></blockquote><br class=""></blockquote><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); float: none; display: inline !important;" class="">Netsec mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><a href="mailto:Netsec@cabforum.org" style="color: rgb(149, 79, 114); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class="">Netsec@cabforum.org</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><a href="http://cabforum.org/mailman/listinfo/netsec" style="color: rgb(149, 79, 114); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class="">http://cabforum.org/mailman/listinfo/netsec</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""></div></blockquote></div><br class=""></div></div></body></html>