[Servercert-wg] Missing ballot (and EVG revision) from the CABF website?

[Jos Purvis (jopurvis)]

I would recommend just a note on the EVG page indicating that due to an oversight, v1.5.3 wasn’t published properly and was superseded by 1.5.4 (and completely adopted by the go-forward re-adoption ballot). If anyone happens to have a copy of v1.5.3 lying around, it’d be easy to republish, but since we don’t need it for anything, reconstructing it is probably more effort than it’s worth at this point. 

 

-- 
Jos Purvis (jopurvis at cisco.com)
.:|:.:|:. cisco systems | Cryptographic Services
PGP: 0xFD802FEE07D19105 | Controls and Trust Verification

 

 

From: Ryan Sleevi <sleevi at google.com>
Date: Wednesday, June 10, 2020 at 3:06 PM
To: CABF Server Cert WG <servercert-wg at cabforum.org>
Cc: Dean Coclin <dean.coclin at digicert.com>, "Jos Purvis (jopurvis)" <jopurvis at cisco.com>, "Dimitris Zacharopoulos (HARICA)" <dzacharo at harica.gr>, Wayne Thayer <wthayer at gmail.com>
Subject: Missing ballot (and EVG revision) from the CABF website?

 

When looking at https://cabforum.org/extended-validation/ , I don't see an EVG 1.5.3

 

Yet if you look at the changelog history, you'll see EVG 1.5.3 was associated with Ballot 144, which was voted on in 2015-02 (see https://oldportal.cabforum.org/pipermail/public/2015-February/thread.html ) and as documented on our webpage https://cabforum.org/2015/02/18/ballot-144-validation-rules-dot-onion-names/

 

Ben had proposed Redlines (EVGs https://oldportal.cabforum.org/pipermail/public/2015-February/005091.html and BRGs https://oldportal.cabforum.org/pipermail/public/2015-February/005093.html ), and we'd posted v1.2.4 of the BRs that resulted from Ballot 144 at https://cabforum.org/baseline-requirements-documents/ , but I'm not seeing an EVG 1.5.3

 

I looked through the mail archives and this was during the period where review notices weren't being sent, so I didn't find any review notice with the document. I also didn't find a final copy of the document, beyond that thread above.

 

Not trying to pick at old issues, since we largely resolved these with the "readoption" ballot on a go-forward, but should we try to create a v1.5.3 for the website? Or just add a note that due to an oversight, it wasn't published, but refer to Ballot 144 for the text?

 

Also apologies if I overlooked something blindingly obvious :)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20200610/46667454/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3699 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20200610/46667454/attachment-0001.p7s>