[Servercert-wg] Voting Period: Ballot SC42v2: 398-day IP Address and Domain Validation Reuse Period

[Aaron Gable]

Let's Encrypt / ISRG votes yes on SC42v2.

On Thu, Apr 15, 2021 at 10:18 AM Ben Wilson via Servercert-wg <
servercert-wg at cabforum.org> wrote:

> This email begins voting on Ballot SC42v2: 398-day IP Address and Domain
> Validation Reuse Period.
>
>     *Type of Ballot:*
>
>     This is a ballot to adopt two Final Maintenance Guidelines which
> modify the Forum's Baseline Requirements for the Issuance and Management of
> Publicly-Trusted Certificates (BRs) and the Guidelines for the Issuance and
> Management of Extended Validation Certificates (EVGs).
>
>     *Purpose of Ballot:*
>
>     This ballot changes validation reuse periods for FQDN and IP Address
> validation to 398 days in section 4.2.1 of the BRs and for all purposes in
> section 11.14.3 of the EVGs. The ballot does not change the 825-day reuse
> period in section 4.2.1. of the BRs for Organizational Validation (OV)
> information.
>
>     Specifically:
>
>     * It inserts as the last sentence in the third paragraph of BR
> section 4.2.1, "Effective 2021-10-01, for validation of Domain Names and IP
> Addresses according to Section 3.2.2.4 and 3.2.2.5, any reused data,
> document, or completed validation MUST be obtained no more than 398 days
> prior to issuing the Certificate."
>
>     * It replaces eight instances of "thirteen months" or
> "thirteen-month" in EVG section 11.14.3 with 398 days.
>
>     The following motion has been proposed by Ben Wilson of Mozilla and
> endorsed by Dimitris Zacharopoulos of HARICA and Chema Lopez of
> Firmaprofesional.
>
>      *– MOTION BEGINS –*
>
>     This ballot modifies the “Baseline Requirements for the Issuance and
> Management of Publicly-Trusted Certificates” (“BRs”), based on Version
> 1.7.3:
>
>     Insert as the last sentence in the third paragraph of section 4.2.1
> of the BRs, "Effective 2021-10-01, for validation of Domain Names and IP
> Addresses according to Section 3.2.2.4 and 3.2.2.5, any reused data,
> document, or completed validation MUST be obtained no more than 398 days
> prior to issuing the Certificate." as illustrated in the following redline
> on GitHub:
>
>
> https://github.com/cabforum/servercert/compare/9672b03bec91ad9a80f826e928e47f5c1f82964b...7cd105daf3baba01579c167d9fc10afacd49c503
>
>     This ballot modifies the “Guidelines for the Issuance and Management
> of Extended Validation Certificates” (“EVGs”) as follows, based on Version
> 1.7.4:
>
>     REPLACE all eight instances of "thirteen months" (or
> "thirteen-month") in section 11.14.3 of the EVGs with 398 days and 398-day,
> respectively, as illustrated in the following redline on GitHub:
>
>
> https://github.com/cabforum/servercert/compare/9672b03bec91ad9a80f826e928e47f5c1f82964b...7cd105daf3baba01579c167d9fc10afacd49c503
>
>
>
>       *– MOTION ENDS –*
>
>
>
>     This ballot proposes two Final Maintenance Guidelines.
>
>     The procedure for approval of this ballot is as follows:
>
>     *Discussion (7+ days)*
>
>     Start Time: 2021-04-08 17:00:00 UTC
>
>     End Time: 2021-04-15  17:00:00 UTC
>
>     *Vote for approval (7 days)*
>
>     Start Time: 2021-04-15  17:00:00 UTC
>
>     End Time: 2021-04-22  17:00:00 UTC
> _______________________________________________
> Servercert-wg mailing list
> Servercert-wg at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/servercert-wg
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20210421/a26b052b/attachment-0001.html>