[cabfpub] Voting has started on Ballot 180 - ends January 7

Thu Jan 5 12:57:26 UTC 2017

TÜRKTRUST votes YES

Volkan NERGİZ

Quality Management System Specialist

TURKTRUST Information Security Services Inc.

Address: Hollanda Caddesi 696. Sokak No: 7 Yıldız, Çankaya 06550 - ANKARA 

Phone: +90312 439 10 00 - Ext: 226 Fax: +90312 439 10 01

E-Mail:  <mailto:volkan.nergiz at turktrust.com.tr>
volkan.nergiz at turktrust.com.tr  

Web:  <http://www.turktrust.com.tr/> www.turktrust.com.tr 

From: Public [mailto:public-bounces at cabforum.org] On Behalf Of Enric
Castillo via Public
Sent: Wednesday, January 4, 2017 10:44 PM
To: public at cabforum.org
Cc: Enric Castillo <enric.castillo at anf.es>
Subject: Re: [cabfpub] Voting has started on Ballot 180 - ends January 7

Reposting the vote in the public list.

ANF Autoridad de Certificación votes yes.

El 02/01/2017 a las 13:28, Kirk Hall via Public escribió:

The voting period for Ballot 180 has started, and will continue until
January 7, 2017 at 22:00 UTC.  The ballot is shown below.  Please vote this
week on this ballot and also on Ballot 181.  Bylaw 2.2(d) says "All voting
will take place online via the members' electronic mailing list", so voting
should take place on the management list, management at cabforum.org
<mailto:management at cabforum.org> .   

Ballot 180 - Readopting the BRs, EVGL, EV Code Signing, and NCSSR Guidelines
with Amendments 

The following motion has been proposed by Kirk Hall of Entrust and endorsed
by Peter Bowen of Amazon and Virginia Fournier of Apple as a Final
Guideline:

-- MOTION BEGINS -

In accordance with the Bylaws and Intellectual Property Rights (IPR) Policy
of the CA/Browser Forum (the "Forum"), the following Guidelines:

*         Baseline Requirements Certificate Policy for the Issuance and
Management of Publicly-Trusted Certificates (BRs)

*         Guidelines for the Issuance and Management of Extended Validation
Certificates (EVGL)

*         Guidelines for the Issuance and Management of Extended Validation
Code Signing Certificates, and 

*         Network and Certificate System Security Requirements,

all as previously approved by all ballots up to and including Ballot 175,
are hereby readopted by this Ballot, with the following amendments.

1.  BR 3.2.2.4 is amended to read in its entirety as follows:

3.2.2.4 Validation of Domain Authorization or Control

This section defines the permitted processes and procedures for validating
the Applicant's ownership or control of the domain.

The CA SHALL confirm that, as of the date the Certificate issues, either the
CA or a Delegated Third Party has validated each Fully-Qualified Domain Name
(FQDN) listed in the Certificate by using any method of confirmation,
provided that the CA maintains documented evidence that the method of
confirmation establishes that the Applicant is the Domain Name Registrant or
has control over the Fully Qualified Domain Name (FQDN).

Completed confirmations of Applicant authority may be valid for the issuance
of multiple certificates over time. In all cases, the confirmation must have
been initiated within the time period specified in the relevant requirement
(such as Section 3.3.1 of this document) prior to certificate issuance. For
purposes of domain validation, the term Applicant includes the Applicant's
Parent Company, Subsidiary Company, or Affiliate.

2.  EVGL 11.7 is amended to read in its entirety as follows:

11.7.1. Verification Requirements

(1) For each Fully-Qualified Domain Name listed in a Certificate, other than
a Domain Name with .onion in the rightmost label of the Domain Name, the CA
SHALL confirm that, as of the date the Certificate was issued, the Applicant
(or the Applicant's Parent Company, Subsidiary Company, or Affiliate,
collectively referred to as "Applicant" for the purposes of this section)
either is the Domain Name Registrant or has control over the FQDN using a
procedure specified in Section 3.2.2.4 of the Baseline Requirements. For a
Certificate issued to a Domain Name with .onion in the right-most label of
the Domain Name, the CA SHALL confirm, as of the date the Certificate was
issued, the Applicant's control over the .onion Domain Name in accordance
with Appendix F.

(2) Mixed Character Set Domain Names: EV Certificates MAY include Domain
Names containing mixed character sets only in compliance with the rules set
forth by the domain registrar. The CA MUST visually compare any Domain Names
with mixed character sets with known high risk domains. If a similarity is
found, then the EV Certificate Request MUST be flagged as High Risk. The CA
must perform reasonably appropriate additional authentication and
verification to be certain beyond reasonable doubt that the Applicant and
the target in question are the same organization.

The proposer and endorsers of this Ballot may withdraw this Ballot at any
time prior to completion of the final vote for approval, in which case the
Ballot will not proceed further.

-- MOTION ENDS - 

The procedure for this Maintenance Guideline ballot is as follows (exact
start and end times may be adjusted to comply with applicable Bylaws and IPR
Agreement):

BALLOT 180

Status: Final Guideline

Start time (22:00 UTC)

End time (22:00 UTC)

Discussion (7 days)

Oct. 25, 2016

Nov. 1, 2016

Review Period (Chair to send Review Notice) (60 days).  

If Exclusion Notice(s) filed, PAG to be created and no further action until
PAG recommendations received.

If no Exclusion Notice(s) filed, proceed to:

Nov. 1, 2016

Dec. 31, 2016

Vote for approval (7 days)

Dec. 31, 2016

Jan. 7, 2017

Votes must be cast by posting an on-list reply to this thread on the Public
list. 

A vote in favor of the motion must indicate a clear 'yes' in the response. A
vote against must indicate a clear 'no' in the response. A vote to abstain
must indicate a clear 'abstain' in the response. Unclear responses will not
be counted. The latest vote received from any representative of a voting
member before the close of the voting period will be counted. Voting members
are listed here:  <https://cabforum.org/members/>
https://cabforum.org/members/ 

In order for the motion to be adopted, two thirds or more of the votes cast
by members in the CA category and greater than 50% of the votes cast by
members in the browser category must be in favor.  Quorum is currently ten
(10) members - at least ten members must participate in the ballot, either
by voting in favor, voting against, or abstaining.

_______________________________________________
Public mailing list
Public at cabforum.org <mailto:Public at cabforum.org> 
https://cabforum.org/mailman/listinfo/public

-- 

Enric Castillo 
Director Técnico 
ANF Autoridad de Certificación 
+34 626818285 (Celular) 
Gran Vía de Les Corts Catalanes 996, Barcelona 
+593 0 996483798 (Celular) 
+593 2 2550002 
Av. 12 de Octubre N24-562 y Luis Cordero, Edif. World Trade Center, Torre A,
Piso 11, Ofi. 1102, Quito 
castillo.enric 
enric.castillo at anf.es <mailto:enric.castillo at anf.es>  
www.anf.es <http://www.anf.es>  

AVISO
Este mensaje se dirige exclusivamente a su destinatario y puede contener
información privilegiada o confidencial y/o datos de carácter personal, cuya
difusión está regulada por la Ley Orgánica de Protección de Datos y la Ley
de Servicios de la Sociedad de la Información. Si usted no es el
destinatario indicado (o el responsable de la entrega al mismo), no debe
copiar o entregar este mensaje a terceros bajo ningún concepto. Si ha
recibido este mensaje por error o lo ha conseguido por otros medios, le
rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a
su eliminación irreversible. Las opiniones, conclusiones y demás
informaciones incluidas en este mensaje que no estén relacionadas con
asuntos profesionales de ANF Autoridad de Certificación no están respaldadas
por la empresa. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 1905 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 13209 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0021.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image010.png
Type: image/png
Size: 573 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0022.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image011.png
Type: image/png
Size: 774 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0023.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image012.png
Type: image/png
Size: 755 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0024.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image013.png
Type: image/png
Size: 597 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0025.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image014.png
Type: image/png
Size: 826 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0026.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image015.png
Type: image/png
Size: 12226 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170105/7996ede7/attachment-0027.png>