[cabfpub] Naming rules

[Jeremy Rowley]

There's one important item that seems unclear to me. What I took from reading Li Chun's message:

1)	Taiwan has a country-level registration
2)	Taiwan has a city-level registration
3)	The two are not mutually exclusive (ie ABC Company at the country level might be a completely different entity than ABC Company at the city level)
4)	You want the BRs to distinguish whether the ABC Company was registered with the country of Taiwan vs. a city registration.
5)	If locality is included in a cert, the actions of ABC Company (country) could be falsely attributed to the ABC Company (local)

I can't tell if #3 is true. If it is, then I can see why we'd want to make the change. If #3 is not true, then the change is only for convenience in Taiwan.

-----Original Message-----
From: Gervase Markham [mailto:gerv at mozilla.org] 
Sent: Tuesday, March 21, 2017 12:13 PM
To: CA/Browser Forum Public Discussion List <public at cabforum.org>
Cc: Jeremy Rowley <jeremy.rowley at digicert.com>
Subject: Re: [cabfpub] Naming rules

On 21/03/17 10:51, Jeremy Rowley via Public wrote:
> Despite the discussion today, I’m still not clear on why the cert 
> can’t include locality information.

The short answer to this question is:

a) they want to use their existing X509 names, which don't include it
b) it's safe to not include it, because the entities concerned have all-Taiwan-unique names

Gerv

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4964 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170322/37474dfd/attachment-0001.p7s>